Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
Assessment
Vulnerability Intelligence
Exploits
Alerts
Datasets
MCP
White Label
Security Automation SDK
MCP for AI Agents
Plans & Pricing
API Reference
Settings
Sign in

CVE-2020-36478

🗓️ 23 Aug 2021 00:00:00Reported by mitreType 
cve
 cve🔗 web.nvd.nist.gov📰️ 5 Media mentions👁 131 Views

Mbed TLS before 2.25.0 vulnerability CVE-2020-36478 - certificate validation issue

Related
Detection
Refs
Social
ReporterTitlePublishedViews
Family
astralinux
AstraLinux		Astra Linux – vulnerability in mbedtls
15 Oct 202615:53
–astralinux
bdu_fstec
BDU FSTEC		Mbed TLS SSL/TLS Certificate Validation
11 Apr 202200:00
–bdu_fstec
cnnvd
CNNVD		ARM mbed TLS trust management issue vulnerability
23 Aug 202100:00
–cnnvd
cnvd
CNVD		ARM mbed TLS Trust Management Issue Vulnerability
25 Aug 202100:00
–cnvd
cvelist
Cvelist		CVE-2020-36478
23 Aug 202100:00
–cvelist
debian
Debian		[SECURITY] [DLA 2826-1] mbedtls security update
23 Nov 202113:36
–debian
debian
Debian		[SECURITY] [DLA 3249-1] mbedtls security update
25 Dec 202223:33
–debian
debiancve
Debian CVE		CVE-2020-36478
23 Aug 202100:00
–debiancve
nessus
Tenable Nessus		Debian DLA-2826-1 : mbedtls - LTS security update
23 Nov 202100:00
–nessus
nessus
Tenable Nessus		Debian dla-3249 : libmbedcrypto3 - security update
26 Dec 202200:00
–nessus
Rows per page

CVEnew: CVE-2020-36478 An issue was discovered in Mbed TLS before 2.25.0 (and before 2.16.9 LTS and before 2.7.18 LTS). A NULL algorithm parameters entry looks identical to an array of REAL (size zero) and thus the certificate is considered valid. Howeve… https://t.co/zS7x5hzCHp?amp=1

CVEnew: CVE-2020-36478 An issue was discovered in Mbed TLS before 2.25.0 (and before 2.16.9 LTS and before 2.7.18 LTS). A NULL algorithm parameters entry looks identical to an array of REAL (size zero) and thus the certificate is considered valid. Howeve… https://t.co/zS7x5hzCHp?amp=1

RT: CVE-2020-36478 An issue was discovered in Mbed TLS before 2.25.0 (and before 2.16.9 LTS and before 2.7.18 LTS). A NULL algorithm parameters entry looks identical to an array of REAL (size zero) and thus the certificate is considered valid. However... …

RT: CVE-2020-36478 An issue was discovered in Mbed TLS before 2.25.0 (and before 2.16.9 LTS and before 2.7.18 LTS). A NULL algorithm parameters entry looks identical to an array of REAL (size zero) and thus the certificate is considered valid. However... …

NEW: CVE-2020-36478 An issue was discovered in Mbed TLS before 2.25.0 (and before 2.16.9 LTS and before 2.7.18 LTS). A NULL algorithm parameters entry looks identical to an array of REAL (size zero) and thus th... (click for more) Severity: HIGH https://t.co/hH8FwC7Eh6?amp=1

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a demo
17 Jun 2026 03:15Current
7.3High risk
Vulners AI Score7.3
CVSS 25
CVSS 3.17.5
EPSS0.01102
CWE-295
mbed tlscve-2020-36478vulnerabilitycertificate validationnvdsecurity advisory
131