Lucene search
MitreCVELIST:CVE-2020-36478HistoryAug 23, 2021 - 12:00 a.m.
CVE-2020-36478
2021-08-2300:00:00
mitre
www.cve.org
5
mbed tls
null algorithm parameters
invalid certificate
An issue was discovered in Mbed TLS before 2.25.0 (and before 2.16.9 LTS and before 2.7.18 LTS). A NULL algorithm parameters entry looks identical to an array of REAL (size zero) and thus the certificate is considered valid. However, if the parameters do not match in any way, then the certificate should be considered invalid.
References
cert-portal.siemens.com/productcert/pdf/ssa-756638.pdf
github.com/ARMmbed/mbedtls/issues/3629
github.com/ARMmbed/mbedtls/releases/tag/v2.16.9
github.com/ARMmbed/mbedtls/releases/tag/v2.25.0
github.com/ARMmbed/mbedtls/releases/tag/v2.7.18
lists.debian.org/debian-lts-announce/2021/11/msg00021.html
lists.debian.org/debian-lts-announce/2022/12/msg00036.html
Related
cnvd
cnvd
ARM mbed TLS Trust Management Issue Vulnerability
2021-08-25 00:00:00
osv
osv
CVE-2020-36478
2021-08-23 02:15:07
mbedtls - security update
2021-11-23 00:00:00
mbedtls - security update
2022-12-26 00:00:00
prion
prion
Code injection
2021-08-23 02:15:00
nvd
nvd
CVE-2020-36478
2021-08-23 02:15:07
debiancve
debiancve
CVE-2020-36478
2021-08-23 02:15:07
ubuntucve
ubuntucve
CVE-2020-36478
2021-08-23 00:00:00
nessus
nessus
Siemens LOGO! CMR and SIMATIC RTU 3000 Improper Certificate Validation (CVE-2020-36478)
2023-09-21 00:00:00
Debian DLA-2826-1 : mbedtls - LTS security update
2021-11-23 00:00:00
GLSA-202301-08 : Mbed TLS: Multiple Vulnerabilities
2023-01-11 00:00:00
cve
cve
CVE-2020-36478
2021-08-23 02:15:07
ics
ics
Siemens LOGO! CMR and SIMATIC RTU 3000
2021-09-14 12:00:00
debian
debian
[SECURITY] [DLA 2826-1] mbedtls security update
2021-11-23 13:36:24
[SECURITY] [DLA 3249-1] mbedtls security update
2022-12-25 23:33:58
openvas
openvas
Debian: Security Advisory (DLA-2826-1)
2021-11-24 00:00:00
Debian: Security Advisory (DLA-3249-1)
2022-12-26 00:00:00
gentoo
gentoo
Mbed TLS: Multiple Vulnerabilities
2023-01-11 00:00:00