Alpine: multiple mbedtls packages: security update to 3.6.4-r0

critical Tenable Self-Hosted Container Security Plugin ID 428615

Description

There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:

- Mbed TLS before 3.6.4 allows a use-after-free in certain situations of applications that are developed in
accordance with the documentation. The function mbedtls_x509_string_to_names() takes a head argument that
is documented as an output argument. The documentation does not suggest that the function will free that
pointer; however, the function does call mbedtls_asn1_free_named_data_list() on that argument, which
performs a deep free(). As a result, application code that uses this function (relying only on documented
behavior) is likely to still hold pointers to the memory blocks that were freed, resulting in a high risk
of use-after-free or double-free. In particular, the two sample programs x509/cert_write and x509/cert_req
are affected (use-after-free if the san string contains more than one DN). (CVE-2025-47917)

- Mbed TLS before 3.6.4 has a NULL pointer dereference because mbedtls_asn1_store_named_data can trigger
conflicting data with val.p of NULL but val.len greater than zero. (CVE-2025-48965)

- In Mbed TLS 3.6.1 through 3.6.3 before 3.6.4, a timing discrepancy in block cipher padding removal allows
an attacker to recover the plaintext when PKCS#7 padding mode is used. (CVE-2025-49087)

- In MbedTLS 3.3.0 before 3.6.4, mbedtls_lms_verify may accept invalid signatures if hash computation fails
and internal errors go unchecked, enabling LMS (Leighton-Micali Signature) forgery in a fault scenario.
Specifically, unchecked return values in mbedtls_lms_verify allow an attacker (who can induce a hardware
hash accelerator fault) to bypass LMS signature verification by reusing stale stack data, resulting in
acceptance of an invalid signature. In mbedtls_lms_verify, the return values of the internal Merkle tree
functions create_merkle_leaf_value and create_merkle_internal_value are not checked. These functions
return an integer that indicates whether the call succeeded or not. If a failure occurs, the output buffer
(Tc_candidate_root_node) may remain uninitialized, and the result of the signature verification is
unpredictable. When the software implementation of SHA-256 is used, these functions will not fail.
However, with hardware-accelerated hashing, an attacker could use fault injection against the accelerator
to bypass verification. (CVE-2025-49600)

Plugin Details

Severity: Critical

ID: 428615

Version: Revision 1.15

Type: Local

Family: Alpine Linux Local Security Checks

Published: 7/22/2025

Updated: 6/1/2026

Supported Sensors: Agentless Assessment, Tenable Cloud Security, Tenable Self-Hosted Container Security

Risk Information

VPR

Risk Factor: High

Score: 7.6

Percentile: 98.6

CVSS v2

Risk Factor: Critical

Base Score: 10

Temporal Score: 7.8

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

CVSS Score Source: CVE-2025-47917

CVSS v3

Risk Factor: Critical

Base Score: 9.8

Temporal Score: 8.8

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Temporal Vector: CVSS:3.0/E:P/RL:O/RC:C

Vulnerability Information

Exploit Available: true

Exploit Ease: Exploits are available

Vulnerability Publication Date: 7/4/2025

Reference Information

CVE: CVE-2025-47917, CVE-2025-48965, CVE-2025-49087, CVE-2025-49600, CVE-2025-49601, CVE-2025-52496, CVE-2025-52497

Detections

Analytics