CVE-2020-36425

An issue was discovered in Arm Mbed TLS before 2.24.0. It incorrectly uses a revocationDate check when deciding whether to honor certificate revocatio...

Description d'origine

La description telle que publiée par la source (souvent en anglais).

An issue was discovered in Arm Mbed TLS before 2.24.0. It incorrectly uses a revocationDate check when deciding whether to honor certificate revocation via a CRL. In some situations, an attacker can exploit this by changing the local clock.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

État des correctifs par distribution

Paquets corrigés publiés par chaque distribution pour cette CVE

Debian DEBIAN-CVE-2020-36425 mbedtls Corrigé dans: 2.16.9-0.1

Références

advisory github.com
advisory github.com
advisory github.com
advisory github.com
advisory lists.debian.org
patch bugs.gentoo.org
report github.com