There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:

  - Mbed TLS before 3.6.4 allows a use-after-free in certain situations of applications that are developed in
    accordance with the documentation. The function mbedtls_x509_string_to_names() takes a head argument that
    is documented as an output argument. The documentation does not suggest that the function will free that
    pointer; however, the function does call mbedtls_asn1_free_named_data_list() on that argument, which
    performs a deep free(). As a result, application code that uses this function (relying only on documented
    behavior) is likely to still hold pointers to the memory blocks that were freed, resulting in a high risk
    of use-after-free or double-free. In particular, the two sample programs x509/cert_write and x509/cert_req
    are affected (use-after-free if the san string contains more than one DN). (CVE-2025-47917)

  - Mbed TLS before 3.6.4 has a NULL pointer dereference because mbedtls_asn1_store_named_data can trigger
    conflicting data with val.p of NULL but val.len greater than zero. (CVE-2025-48965)

  - In Mbed TLS 3.6.1 through 3.6.3 before 3.6.4, a timing discrepancy in block cipher padding removal allows
    an attacker to recover the plaintext when PKCS#7 padding mode is used. (CVE-2025-49087)

  - In MbedTLS 3.3.0 before 3.6.4, mbedtls_lms_verify may accept invalid signatures if hash computation fails
    and internal errors go unchecked, enabling LMS (Leighton-Micali Signature) forgery in a fault scenario.
    Specifically, unchecked return values in mbedtls_lms_verify allow an attacker (who can induce a hardware
    hash accelerator fault) to bypass LMS signature verification by reusing stale stack data, resulting in
    acceptance of an invalid signature. In mbedtls_lms_verify, the return values of the internal Merkle tree
    functions create_merkle_leaf_value and create_merkle_internal_value are not checked. These functions
    return an integer that indicates whether the call succeeded or not. If a failure occurs, the output buffer
    (Tc_candidate_root_node) may remain uninitialized, and the result of the signature verification is
    unpredictable. When the software implementation of SHA-256 is used, these functions will not fail.
    However, with hardware-accelerated hashing, an attacker could use fault injection against the accelerator
    to bypass verification. (CVE-2025-49600)

Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且供應商未提供可用的修補程式。

  - 在 3.6.4之前的 MbedTLS 3.3.0 ] 中mbedtls_lms_import_public_key 在讀取 32 位元欄位之前未檢查輸入緩衝區的大小是否至少為 4 位元組進而允許對截斷的輸入進行可能的超出邊界讀取。
    具體而言mbedtls_lms_import_public_key 中的超出邊界讀取允許內容相依的攻擊者提供四個位元組以下的截斷 LMS (Leighton-Micali Signature) 公開金鑰緩衝區藉此觸發當機或有限相鄰記憶體洩漏。LMS 公開金鑰開頭有一個 4 位元組類型指示器。mbedtls_lms_import_public_key 函式會在驗證其輸入大小之前讀取此類型指示器。
    (CVE-2025-49601)

請注意，Nessus 依賴供應商報告的套件存在。

Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - 在 3.3.03.6.4] 之前版本的 MbedTLS 中mbedtls_lms_import_public_key 未在读取 32 位字段之前检查输入缓冲区是否至少为 4 字节从而允许对截断的输入进行可能的越界读取。
    具体来说mbedtls_lms_import_public_key 中存在越界读取允许上下文有关的攻击者通过提供四个字节以下的截断 LMSLeighton-Micali 签名公钥缓冲区来触发崩溃或有限的邻近内存泄露。LMS 公钥以 4 字节的类型指示符开头。函数 mbedtls_lms_import_public_key 在验证其输入大小之前会读取此类型指示符。
    (CVE-2025-49601)

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

Linux/Unix ホストには、ベンダーが提供するパッチが利用できない脆弱性の影響を受ける複数のパッケージがインストールされています。

  - 3.3.03.6.4より前の MbedTLS [] では、mbedtls_lms_import_public_key が 32 ビットフィールドを読み込む前に入力バッファが少なくとも 4 バイトであることをチェックしません。このため、切り捨てられた入力で領域外を読み取る可能性があります。
    具体的には、mbedtls_import_public_key の領域外読み取りにより、コンテキスト依存の攻撃者は、4 バイト未満の切り捨てられた LMSLeighton-Micali Signature公開鍵バッファを供給することで、クラッシュや限定された隣接メモリ漏洩を引き起こすことができます。LMS 公開鍵は、4 バイトタイプインジケーターで始まります。mbedtls_lms_import_public_key 関数は、入力のサイズを検証する前にこのタイプインジケーターを読み取ります。
    (CVE-2025-49601)

Nessus は、ベンダーによって報告されたパッケージの存在に依存していることに注意してください。

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - In MbedTLS 3.3.0 before 3.6.4, mbedtls_lms_import_public_key does not check that the input buffer is at     least 4 bytes before reading a 32-bit field, allowing a possible out-of-bounds read on truncated input.
    Specifically, an out-of-bounds read in mbedtls_lms_import_public_key allows context-dependent attackers to     trigger a crash or limited adjacent-memory disclosure by supplying a truncated LMS (Leighton-Micali     Signature) public-key buffer under four bytes. An LMS public key starts with a 4-byte type indicator. The     function mbedtls_lms_import_public_key reads this type indicator before validating the size of its input.
    (CVE-2025-49601)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	名稱	產品	系列	已發布	已更新	嚴重性
428615	Alpine: multiple mbedtls packages: security update to 3.6.4-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	2025/7/22	2026/7/2	critical
428615	Alpine: multiple mbedtls packages: security update to 3.6.4-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	2025/7/22	2026/7/2	critical
247061	Linux Distros 未修補的弱點：CVE-2025-49601	Nessus	Misc.	2025/8/9	2026/7/25	medium
247061	Linux Distros 未修补的漏洞：CVE-2025-49601	Nessus	Misc.	2025/8/9	2026/7/25	medium
247061	Linux Distros のパッチ未適用の脆弱性: CVE-2025-49601	Nessus	Misc.	2025/8/9	2026/7/25	medium
247061	Linux Distros Unpatched Vulnerability : CVE-2025-49601	Nessus	Misc.	2025/8/9	2026/7/25	medium

偵測

搜尋 Plugin

critical

critical

medium

medium

medium

medium