CVE-2020-36475
An issue was discovered in Mbed TLS before 2.25.0 (and before 2.16.9 LTS and before 2.7.18 LTS). The calculations performed by mbedtls_mpi_exp_mod are...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
An issue was discovered in Mbed TLS before 2.25.0 (and before 2.16.9 LTS and before 2.7.18 LTS). The calculations performed by mbedtls_mpi_exp_mod are not limited; thus, supplying overly large parameters could lead to denial of service when generating Diffie-Hellman key pairs.
État des correctifs par distribution
Paquets corrigés publiés par chaque distribution pour cette CVE
- Debian DEBIAN-CVE-2020-36475 mbedtls Corrigé dans: 2.16.9-0.1
Références
- advisory github.com
- advisory github.com
- advisory github.com
- advisory lists.debian.org
- advisory lists.debian.org
- patch cert-portal.siemens.com