Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2020-36478HistoryAug 23, 2021 - 2:15 a.m.
CVE-2020-36478
2021-08-2302:15:00
Debian Security Bug Tracker
security-tracker.debian.org
7
0.002 Low
EPSS
Percentile
61.2%
An issue was discovered in Mbed TLS before 2.25.0 (and before 2.16.9 LTS and before 2.7.18 LTS). A NULL algorithm parameters entry looks identical to an array of REAL (size zero) and thus the certificate is considered valid. However, if the parameters do not match in any way, then the certificate should be considered invalid.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | mbedtls | < 2.16.9-0.1 | mbedtls_2.16.9-0.1_all.deb |
| Debian | 11 | all | mbedtls | < 2.16.9-0.1 | mbedtls_2.16.9-0.1_all.deb |
| Debian | 10 | all | mbedtls | < 2.16.9-0~deb10u1 | mbedtls_2.16.9-0~deb10u1_all.deb |
| Debian | 999 | all | mbedtls | < 2.16.9-0.1 | mbedtls_2.16.9-0.1_all.deb |
| Debian | 13 | all | mbedtls | < 2.16.9-0.1 | mbedtls_2.16.9-0.1_all.deb |
Related
cnvd
cnvd
ARM mbed TLS Trust Management Issue Vulnerability
2021-08-25 00:00:00
cvelist
cvelist
CVE-2020-36478
2021-08-23 00:00:00
cve
cve
CVE-2020-36478
2021-08-23 02:15:00
prion
prion
Code injection
2021-08-23 02:15:00
osv
osv
CVE-2020-36478
2021-08-23 02:15:07
mbedtls - security update
2021-11-23 00:00:00
mbedtls - security update
2022-12-26 00:00:00
nessus
nessus
Siemens LOGO! CMR and SIMATIC RTU 3000 Improper Certificate Validation (CVE-2020-36478)
2023-09-21 00:00:00
Debian DLA-2826-1 : mbedtls - LTS security update
2021-11-23 00:00:00
GLSA-202301-08 : Mbed TLS: Multiple Vulnerabilities
2023-01-11 00:00:00
ubuntucve
ubuntucve
CVE-2020-36478
2021-08-23 00:00:00
ics
ics
Siemens LOGO! CMR and SIMATIC RTU 3000
2021-09-14 12:00:00
debian
debian
[SECURITY] [DLA 2826-1] mbedtls security update
2021-11-23 13:36:44
[SECURITY] [DLA 3249-1] mbedtls security update
2022-12-25 23:34:21
openvas
openvas
Debian: Security Advisory (DLA-2826-1)
2021-11-24 00:00:00
Debian: Security Advisory (DLA-3249-1)
2022-12-26 00:00:00
gentoo
gentoo
Mbed TLS: Multiple Vulnerabilities
2023-01-11 00:00:00