Lucene search
GoogleOSV:CVE-2020-36475HistoryAug 23, 2021 - 2:15 a.m.
CVE-2020-36475
2021-08-2302:15:06
Google
osv.dev
10
mbed tls
calculations
denial of service
diffie-hellman
An issue was discovered in Mbed TLS before 2.25.0 (and before 2.16.9 LTS and before 2.7.18 LTS). The calculations performed by mbedtls_mpi_exp_mod are not limited; thus, supplying overly large parameters could lead to denial of service when generating Diffie-Hellman key pairs.
References
cert-portal.siemens.com/productcert/pdf/ssa-756638.pdf
github.com/ARMmbed/mbedtls/releases/tag/v2.16.9
github.com/ARMmbed/mbedtls/releases/tag/v2.25.0
github.com/ARMmbed/mbedtls/releases/tag/v2.7.18
lists.debian.org/debian-lts-announce/2021/11/msg00021.html
lists.debian.org/debian-lts-announce/2022/12/msg00036.html
Related
ubuntucve
ubuntucve
CVE-2020-36475
2021-08-23 00:00:00
debiancve
debiancve
CVE-2020-36475
2021-08-23 02:15:06
prion
prion
Design/Logic Flaw
2021-08-23 02:15:00
cve
cve
CVE-2020-36475
2021-08-23 02:15:06
cnvd
cnvd
ARM mbed TLS denial of service vulnerability
2021-08-24 00:00:00
nessus
nessus
Siemens LOGO! CMR and SIMATIC RTU 3000 Incorrect Calculation of Buffer Size (CVE-2020-36475)
2023-09-21 00:00:00
Debian DLA-2826-1 : mbedtls - LTS security update
2021-11-23 00:00:00
GLSA-202301-08 : Mbed TLS: Multiple Vulnerabilities
2023-01-11 00:00:00
cvelist
cvelist
CVE-2020-36475
2021-08-23 00:00:00
nvd
nvd
CVE-2020-36475
2021-08-23 02:15:06
ics
ics
Siemens LOGO! CMR and SIMATIC RTU 3000
2021-09-14 12:00:00
debian
debian
[SECURITY] [DLA 2826-1] mbedtls security update
2021-11-23 13:36:24
[SECURITY] [DLA 3249-1] mbedtls security update
2022-12-25 23:33:58
openvas
openvas
Debian: Security Advisory (DLA-2826-1)
2021-11-24 00:00:00
Debian: Security Advisory (DLA-3249-1)
2022-12-26 00:00:00
osv
osv
mbedtls - security update
2021-11-23 00:00:00
mbedtls - security update
2022-12-26 00:00:00
gentoo
gentoo
Mbed TLS: Multiple Vulnerabilities
2023-01-11 00:00:00