Lucene search
Ubuntu.comUB:CVE-2020-36478HistoryAug 23, 2021 - 12:00 a.m.
CVE-2020-36478
2021-08-2300:00:00
ubuntu.com
ubuntu.com
15
0.002 Low
EPSS
Percentile
61.2%
An issue was discovered in Mbed TLS before 2.25.0 (and before 2.16.9 LTS
and before 2.7.18 LTS). A NULL algorithm parameters entry looks identical
to an array of REAL (size zero) and thus the certificate is considered
valid. However, if the parameters do not match in any way, then the
certificate should be considered invalid.
References
github.com/ARMmbed/mbedtls/issues/3629
github.com/ARMmbed/mbedtls/releases/tag/v2.16.9
github.com/ARMmbed/mbedtls/releases/tag/v2.25.0
github.com/ARMmbed/mbedtls/releases/tag/v2.7.18
launchpad.net/bugs/cve/CVE-2020-36478
nvd.nist.gov/vuln/detail/CVE-2020-36478
security-tracker.debian.org/tracker/CVE-2020-36478
www.cve.org/CVERecord?id=CVE-2020-36478
Related
cve
cve
CVE-2020-36478
2021-08-23 02:15:00
cnvd
cnvd
ARM mbed TLS Trust Management Issue Vulnerability
2021-08-25 00:00:00
cvelist
cvelist
CVE-2020-36478
2021-08-23 00:00:00
prion
prion
Code injection
2021-08-23 02:15:00
osv
osv
CVE-2020-36478
2021-08-23 02:15:07
mbedtls - security update
2021-11-23 00:00:00
mbedtls - security update
2022-12-26 00:00:00
debiancve
debiancve
CVE-2020-36478
2021-08-23 02:15:00
nessus
nessus
Siemens LOGO! CMR and SIMATIC RTU 3000 Improper Certificate Validation (CVE-2020-36478)
2023-09-21 00:00:00
Debian DLA-2826-1 : mbedtls - LTS security update
2021-11-23 00:00:00
GLSA-202301-08 : Mbed TLS: Multiple Vulnerabilities
2023-01-11 00:00:00
ics
ics
Siemens LOGO! CMR and SIMATIC RTU 3000
2021-09-14 12:00:00
debian
debian
[SECURITY] [DLA 2826-1] mbedtls security update
2021-11-23 13:36:44
[SECURITY] [DLA 3249-1] mbedtls security update
2022-12-25 23:34:21
openvas
openvas
Debian: Security Advisory (DLA-2826-1)
2021-11-24 00:00:00
Debian: Security Advisory (DLA-3249-1)
2022-12-26 00:00:00
gentoo
gentoo
Mbed TLS: Multiple Vulnerabilities
2023-01-11 00:00:00