PT-2025-48508 · Julia · Mbedtls Jll

Publicado 2025-11-21 · Atualizado 2025-11-21

OSV

An issue was discovered in Mbed TLS before 2.25.0 (and before 2.16.9 LTS and before 2.7.18 LTS). The calculations performed by mbedtls mpi exp mod are not limited; thus, supplying overly large parameters could lead to denial of service when generating Diffie-Hellman key pairs.

Identificadores relacionados

JLSEC-2025-210

Produtos afetados

Mbedtls Jll

Referências · 7

• https://github.com/ARMmbed/mbedtls/releases/tag/v2.7.18 · Nota
• https://github.com/ARMmbed/mbedtls/releases/tag/v2.16.9 · Nota
• https://github.com/ARMmbed/mbedtls/releases/tag/v2.25.0 · Nota
• https://osv.dev/vulnerability/JLSEC-2025-210 · Aviso do Fabricante
• https://lists.debian.org/debian-lts-announce/2021/11/msg00021.html · Nota
• https://lists.debian.org/debian-lts-announce/2022/12/msg00036.html · Nota
• https://cert-portal.siemens.com/productcert/pdf/ssa-756638.pdf · Nota