The vulnerability of the x509_crt_verify_name function in implementations of TLS and SSL protocols allows a attacker to compromise the integrity of data.

The x509_crt_verify_name flaw in TLS and SSL enables attackers to compromise data integrity due to incorrect data type comparisons.

Reporter	Title	Published	Views	Family All 28
CNNVD	ARM mbed TLS 信任管理问题漏洞	23 Aug 202100:00	–	cnnvd
CVE	CVE-2020-36477	23 Aug 202100:00	–	cve
Cvelist	CVE-2020-36477	23 Aug 202100:00	–	cvelist
Debian CVE	CVE-2020-36477	23 Aug 202100:00	–	debiancve
EUVD	EUVD-2020-23963	7 Oct 202500:30	–	euvd
Tenable Nessus	GLSA-202301-08 : Mbed TLS: Multiple Vulnerabilities	11 Jan 202300:00	–	nessus
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2020-36477	6 Aug 202500:00	–	nessus
Gentoo Linux	Mbed TLS: Multiple Vulnerabilities	11 Jan 202300:00	–	gentoo
Microsoft CVE	An issue was discovered in Mbed TLS before 2.24.0. The verification of X.509 certificates when matching the expected common name (the cn argument of mbedtls_x509_crt_verify) with the actual certificate name is mishandled: when the subjecAltName extension is present, the expected name is compared to any name in that extension regardless of its type. This means that an attacker could impersonate a 4-byte or 16-byte domain by getting a certificate for the corresponding IPv4 or IPv6 address (this would require the attacker to control that IP address, though).	3 Sep 202522:03	–	mscve
NVD	CVE-2020-36477	23 Aug 202102:15	–	nvd

Vulners

Node

arm mbed_tlsRange<2.24.0

Source	Link
github	www.github.com/ARMmbed/mbedtls/commit/f3e4bd8632b71dc491e52e6df87dc3e409d2b869
github	www.github.com/ARMmbed/mbedtls/issues/3498
nvd	www.nvd.nist.gov/vuln/detail/CVE-2020-36477
security-tracker	www.security-tracker.debian.org/tracker/CVE-2020-36477
xn--80ahaefyxhn	www.xn--80ahaefyxhn.xn--j1afgaq.xn--p1ai/bin/view/%D0%9E%D0%A1%D0%BD%D0%BE%D0%B2%D0%B0/%D0%9E%D0%B1%D0%BD%D0%BE%D0%B2%D0%BB%D0%B5%D0%BD%D0%B8%D1%8F/2.6/
web	www.web.nvd.nist.gov/view/vuln/detail

21 Nov 2022 00:00Current

6.2Medium risk

Vulners AI Score6.2

CVSS 24.3

CVSS 35.9

EPSS0.00832