CVE-2020-36476
An issue was discovered in Mbed TLS before 2.24.0 (and before 2.16.8 LTS and before 2.7.17 LTS). There is missing zeroization of plaintext buffers in...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
An issue was discovered in Mbed TLS before 2.24.0 (and before 2.16.8 LTS and before 2.7.17 LTS). There is missing zeroization of plaintext buffers in mbedtls_ssl_read to erase unused application data from memory.
État des correctifs par distribution
Paquets corrigés publiés par chaque distribution pour cette CVE
- Debian DEBIAN-CVE-2020-36476 mbedtls Corrigé dans: 2.16.9-0.1
Références
- advisory github.com
- advisory github.com
- advisory github.com
- advisory lists.debian.org
- advisory lists.debian.org