mirror of
https://github.com/CVEProject/cvelist.git
synced 2025-08-04 08:44:25 +00:00
"-Synchronized-Data."
This commit is contained in:
CVE Team
parent
6b891f576a
commit
81b0352ac9
77
2020/36xxx/CVE-2020-36421.json
Normal file
77
2020/36xxx/CVE-2020-36421.json
Normal file
@ -0,0 +1,77 @@
|
||||
{
|
||||
"CVE_data_meta": {
|
||||
"ASSIGNER": "cve@mitre.org",
|
||||
"ID": "CVE-2020-36421",
|
||||
"STATE": "PUBLIC"
|
||||
},
|
||||
"affects": {
|
||||
"vendor": {
|
||||
"vendor_data": [
|
||||
{
|
||||
"product": {
|
||||
"product_data": [
|
||||
{
|
||||
"product_name": "n/a",
|
||||
"version": {
|
||||
"version_data": [
|
||||
{
|
||||
"version_value": "n/a"
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
]
|
||||
},
|
||||
"vendor_name": "n/a"
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"data_format": "MITRE",
|
||||
"data_type": "CVE",
|
||||
"data_version": "4.0",
|
||||
"description": {
|
||||
"description_data": [
|
||||
{
|
||||
"lang": "eng",
|
||||
"value": "An issue was discovered in Arm Mbed TLS before 2.23.0. Because of a side channel in modular exponentiation, an RSA private key used in a secure enclave could be disclosed."
|
||||
}
|
||||
]
|
||||
},
|
||||
"problemtype": {
|
||||
"problemtype_data": [
|
||||
{
|
||||
"description": [
|
||||
{
|
||||
"lang": "eng",
|
||||
"value": "n/a"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"references": {
|
||||
"reference_data": [
|
||||
{
|
||||
"url": "https://github.com/ARMmbed/mbedtls/releases/tag/v2.16.7",
|
||||
"refsource": "MISC",
|
||||
"name": "https://github.com/ARMmbed/mbedtls/releases/tag/v2.16.7"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/ARMmbed/mbedtls/releases/tag/v2.23.0",
|
||||
"refsource": "MISC",
|
||||
"name": "https://github.com/ARMmbed/mbedtls/releases/tag/v2.23.0"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/ARMmbed/mbedtls/issues/3394",
|
||||
"refsource": "MISC",
|
||||
"name": "https://github.com/ARMmbed/mbedtls/issues/3394"
|
||||
},
|
||||
{
|
||||
"url": "https://bugs.gentoo.org/730752",
|
||||
"refsource": "MISC",
|
||||
"name": "https://bugs.gentoo.org/730752"
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
72
2020/36xxx/CVE-2020-36422.json
Normal file
72
2020/36xxx/CVE-2020-36422.json
Normal file
@ -0,0 +1,72 @@
|
||||
{
|
||||
"CVE_data_meta": {
|
||||
"ASSIGNER": "cve@mitre.org",
|
||||
"ID": "CVE-2020-36422",
|
||||
"STATE": "PUBLIC"
|
||||
},
|
||||
"affects": {
|
||||
"vendor": {
|
||||
"vendor_data": [
|
||||
{
|
||||
"product": {
|
||||
"product_data": [
|
||||
{
|
||||
"product_name": "n/a",
|
||||
"version": {
|
||||
"version_data": [
|
||||
{
|
||||
"version_value": "n/a"
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
]
|
||||
},
|
||||
"vendor_name": "n/a"
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"data_format": "MITRE",
|
||||
"data_type": "CVE",
|
||||
"data_version": "4.0",
|
||||
"description": {
|
||||
"description_data": [
|
||||
{
|
||||
"lang": "eng",
|
||||
"value": "An issue was discovered in Arm Mbed TLS before 2.23.0. A side channel allows recovery of an ECC private key, related to mbedtls_ecp_check_pub_priv, mbedtls_pk_parse_key, mbedtls_pk_parse_keyfile, mbedtls_ecp_mul, and mbedtls_ecp_mul_restartable."
|
||||
}
|
||||
]
|
||||
},
|
||||
"problemtype": {
|
||||
"problemtype_data": [
|
||||
{
|
||||
"description": [
|
||||
{
|
||||
"lang": "eng",
|
||||
"value": "n/a"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"references": {
|
||||
"reference_data": [
|
||||
{
|
||||
"url": "https://github.com/ARMmbed/mbedtls/releases/tag/v2.16.7",
|
||||
"refsource": "MISC",
|
||||
"name": "https://github.com/ARMmbed/mbedtls/releases/tag/v2.16.7"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/ARMmbed/mbedtls/releases/tag/v2.23.0",
|
||||
"refsource": "MISC",
|
||||
"name": "https://github.com/ARMmbed/mbedtls/releases/tag/v2.23.0"
|
||||
},
|
||||
{
|
||||
"url": "https://bugs.gentoo.org/730752",
|
||||
"refsource": "MISC",
|
||||
"name": "https://bugs.gentoo.org/730752"
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
72
2020/36xxx/CVE-2020-36423.json
Normal file
72
2020/36xxx/CVE-2020-36423.json
Normal file
@ -0,0 +1,72 @@
|
||||
{
|
||||
"CVE_data_meta": {
|
||||
"ASSIGNER": "cve@mitre.org",
|
||||
"ID": "CVE-2020-36423",
|
||||
"STATE": "PUBLIC"
|
||||
},
|
||||
"affects": {
|
||||
"vendor": {
|
||||
"vendor_data": [
|
||||
{
|
||||
"product": {
|
||||
"product_data": [
|
||||
{
|
||||
"product_name": "n/a",
|
||||
"version": {
|
||||
"version_data": [
|
||||
{
|
||||
"version_value": "n/a"
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
]
|
||||
},
|
||||
"vendor_name": "n/a"
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"data_format": "MITRE",
|
||||
"data_type": "CVE",
|
||||
"data_version": "4.0",
|
||||
"description": {
|
||||
"description_data": [
|
||||
{
|
||||
"lang": "eng",
|
||||
"value": "An issue was discovered in Arm Mbed TLS before 2.23.0. A remote attacker can recover plaintext because a certain Lucky 13 countermeasure doesn't properly consider the case of a hardware accelerator."
|
||||
}
|
||||
]
|
||||
},
|
||||
"problemtype": {
|
||||
"problemtype_data": [
|
||||
{
|
||||
"description": [
|
||||
{
|
||||
"lang": "eng",
|
||||
"value": "n/a"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"references": {
|
||||
"reference_data": [
|
||||
{
|
||||
"url": "https://github.com/ARMmbed/mbedtls/releases/tag/v2.16.7",
|
||||
"refsource": "MISC",
|
||||
"name": "https://github.com/ARMmbed/mbedtls/releases/tag/v2.16.7"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/ARMmbed/mbedtls/releases/tag/v2.23.0",
|
||||
"refsource": "MISC",
|
||||
"name": "https://github.com/ARMmbed/mbedtls/releases/tag/v2.23.0"
|
||||
},
|
||||
{
|
||||
"url": "https://bugs.gentoo.org/730752",
|
||||
"refsource": "MISC",
|
||||
"name": "https://bugs.gentoo.org/730752"
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
82
2020/36xxx/CVE-2020-36424.json
Normal file
82
2020/36xxx/CVE-2020-36424.json
Normal file
@ -0,0 +1,82 @@
|
||||
{
|
||||
"CVE_data_meta": {
|
||||
"ASSIGNER": "cve@mitre.org",
|
||||
"ID": "CVE-2020-36424",
|
||||
"STATE": "PUBLIC"
|
||||
},
|
||||
"affects": {
|
||||
"vendor": {
|
||||
"vendor_data": [
|
||||
{
|
||||
"product": {
|
||||
"product_data": [
|
||||
{
|
||||
"product_name": "n/a",
|
||||
"version": {
|
||||
"version_data": [
|
||||
{
|
||||
"version_value": "n/a"
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
]
|
||||
},
|
||||
"vendor_name": "n/a"
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"data_format": "MITRE",
|
||||
"data_type": "CVE",
|
||||
"data_version": "4.0",
|
||||
"description": {
|
||||
"description_data": [
|
||||
{
|
||||
"lang": "eng",
|
||||
"value": "An issue was discovered in Arm Mbed TLS before 2.24.0. An attacker can recover a private key (for RSA or static Diffie-Hellman) via a side-channel attack against generation of base blinding/unblinding values."
|
||||
}
|
||||
]
|
||||
},
|
||||
"problemtype": {
|
||||
"problemtype_data": [
|
||||
{
|
||||
"description": [
|
||||
{
|
||||
"lang": "eng",
|
||||
"value": "n/a"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"references": {
|
||||
"reference_data": [
|
||||
{
|
||||
"url": "https://tls.mbed.org/tech-updates/security-advisories/mbedtls-security-advisory-2020-09-2",
|
||||
"refsource": "MISC",
|
||||
"name": "https://tls.mbed.org/tech-updates/security-advisories/mbedtls-security-advisory-2020-09-2"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/ARMmbed/mbedtls/releases/tag/v2.7.17",
|
||||
"refsource": "MISC",
|
||||
"name": "https://github.com/ARMmbed/mbedtls/releases/tag/v2.7.17"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/ARMmbed/mbedtls/releases/tag/v2.16.8",
|
||||
"refsource": "MISC",
|
||||
"name": "https://github.com/ARMmbed/mbedtls/releases/tag/v2.16.8"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/ARMmbed/mbedtls/releases/tag/v2.24.0",
|
||||
"refsource": "MISC",
|
||||
"name": "https://github.com/ARMmbed/mbedtls/releases/tag/v2.24.0"
|
||||
},
|
||||
{
|
||||
"url": "https://bugs.gentoo.org/740108",
|
||||
"refsource": "MISC",
|
||||
"name": "https://bugs.gentoo.org/740108"
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
87
2020/36xxx/CVE-2020-36425.json
Normal file
87
2020/36xxx/CVE-2020-36425.json
Normal file
@ -0,0 +1,87 @@
|
||||
{
|
||||
"CVE_data_meta": {
|
||||
"ASSIGNER": "cve@mitre.org",
|
||||
"ID": "CVE-2020-36425",
|
||||
"STATE": "PUBLIC"
|
||||
},
|
||||
"affects": {
|
||||
"vendor": {
|
||||
"vendor_data": [
|
||||
{
|
||||
"product": {
|
||||
"product_data": [
|
||||
{
|
||||
"product_name": "n/a",
|
||||
"version": {
|
||||
"version_data": [
|
||||
{
|
||||
"version_value": "n/a"
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
]
|
||||
},
|
||||
"vendor_name": "n/a"
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"data_format": "MITRE",
|
||||
"data_type": "CVE",
|
||||
"data_version": "4.0",
|
||||
"description": {
|
||||
"description_data": [
|
||||
{
|
||||
"lang": "eng",
|
||||
"value": "An issue was discovered in Arm Mbed TLS before 2.24.0. It incorrectly uses a revocationDate check when deciding whether to honor certificate revocation via a CRL. In some situations, an attacker can exploit this by changing the local clock."
|
||||
}
|
||||
]
|
||||
},
|
||||
"problemtype": {
|
||||
"problemtype_data": [
|
||||
{
|
||||
"description": [
|
||||
{
|
||||
"lang": "eng",
|
||||
"value": "n/a"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"references": {
|
||||
"reference_data": [
|
||||
{
|
||||
"url": "https://github.com/ARMmbed/mbedtls/releases/tag/v2.7.17",
|
||||
"refsource": "MISC",
|
||||
"name": "https://github.com/ARMmbed/mbedtls/releases/tag/v2.7.17"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/ARMmbed/mbedtls/releases/tag/v2.16.8",
|
||||
"refsource": "MISC",
|
||||
"name": "https://github.com/ARMmbed/mbedtls/releases/tag/v2.16.8"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/ARMmbed/mbedtls/releases/tag/v2.24.0",
|
||||
"refsource": "MISC",
|
||||
"name": "https://github.com/ARMmbed/mbedtls/releases/tag/v2.24.0"
|
||||
},
|
||||
{
|
||||
"url": "https://bugs.gentoo.org/740108",
|
||||
"refsource": "MISC",
|
||||
"name": "https://bugs.gentoo.org/740108"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/ARMmbed/mbedtls/pull/3433",
|
||||
"refsource": "MISC",
|
||||
"name": "https://github.com/ARMmbed/mbedtls/pull/3433"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/ARMmbed/mbedtls/issues/3340",
|
||||
"refsource": "MISC",
|
||||
"name": "https://github.com/ARMmbed/mbedtls/issues/3340"
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
77
2020/36xxx/CVE-2020-36426.json
Normal file
77
2020/36xxx/CVE-2020-36426.json
Normal file
@ -0,0 +1,77 @@
|
||||
{
|
||||
"CVE_data_meta": {
|
||||
"ASSIGNER": "cve@mitre.org",
|
||||
"ID": "CVE-2020-36426",
|
||||
"STATE": "PUBLIC"
|
||||
},
|
||||
"affects": {
|
||||
"vendor": {
|
||||
"vendor_data": [
|
||||
{
|
||||
"product": {
|
||||
"product_data": [
|
||||
{
|
||||
"product_name": "n/a",
|
||||
"version": {
|
||||
"version_data": [
|
||||
{
|
||||
"version_value": "n/a"
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
]
|
||||
},
|
||||
"vendor_name": "n/a"
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"data_format": "MITRE",
|
||||
"data_type": "CVE",
|
||||
"data_version": "4.0",
|
||||
"description": {
|
||||
"description_data": [
|
||||
{
|
||||
"lang": "eng",
|
||||
"value": "An issue was discovered in Arm Mbed TLS before 2.24.0. mbedtls_x509_crl_parse_der has a buffer over-read (of one byte)."
|
||||
}
|
||||
]
|
||||
},
|
||||
"problemtype": {
|
||||
"problemtype_data": [
|
||||
{
|
||||
"description": [
|
||||
{
|
||||
"lang": "eng",
|
||||
"value": "n/a"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"references": {
|
||||
"reference_data": [
|
||||
{
|
||||
"url": "https://github.com/ARMmbed/mbedtls/releases/tag/v2.7.17",
|
||||
"refsource": "MISC",
|
||||
"name": "https://github.com/ARMmbed/mbedtls/releases/tag/v2.7.17"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/ARMmbed/mbedtls/releases/tag/v2.16.8",
|
||||
"refsource": "MISC",
|
||||
"name": "https://github.com/ARMmbed/mbedtls/releases/tag/v2.16.8"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/ARMmbed/mbedtls/releases/tag/v2.24.0",
|
||||
"refsource": "MISC",
|
||||
"name": "https://github.com/ARMmbed/mbedtls/releases/tag/v2.24.0"
|
||||
},
|
||||
{
|
||||
"url": "https://bugs.gentoo.org/740108",
|
||||
"refsource": "MISC",
|
||||
"name": "https://bugs.gentoo.org/740108"
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
67
2020/36xxx/CVE-2020-36427.json
Normal file
67
2020/36xxx/CVE-2020-36427.json
Normal file
@ -0,0 +1,67 @@
|
||||
{
|
||||
"CVE_data_meta": {
|
||||
"ASSIGNER": "cve@mitre.org",
|
||||
"ID": "CVE-2020-36427",
|
||||
"STATE": "PUBLIC"
|
||||
},
|
||||
"affects": {
|
||||
"vendor": {
|
||||
"vendor_data": [
|
||||
{
|
||||
"product": {
|
||||
"product_data": [
|
||||
{
|
||||
"product_name": "n/a",
|
||||
"version": {
|
||||
"version_data": [
|
||||
{
|
||||
"version_value": "n/a"
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
]
|
||||
},
|
||||
"vendor_name": "n/a"
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"data_format": "MITRE",
|
||||
"data_type": "CVE",
|
||||
"data_version": "4.0",
|
||||
"description": {
|
||||
"description_data": [
|
||||
{
|
||||
"lang": "eng",
|
||||
"value": "GNOME gThumb before 3.10.1 allows an application crash via a malformed JPEG image."
|
||||
}
|
||||
]
|
||||
},
|
||||
"problemtype": {
|
||||
"problemtype_data": [
|
||||
{
|
||||
"description": [
|
||||
{
|
||||
"lang": "eng",
|
||||
"value": "n/a"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"references": {
|
||||
"reference_data": [
|
||||
{
|
||||
"url": "https://download.gnome.org/sources/gthumb/3.10/gthumb-3.10.1.news",
|
||||
"refsource": "MISC",
|
||||
"name": "https://download.gnome.org/sources/gthumb/3.10/gthumb-3.10.1.news"
|
||||
},
|
||||
{
|
||||
"url": "https://mail.gnome.org/archives/gthumb-list/2020-September/msg00001.html",
|
||||
"refsource": "MISC",
|
||||
"name": "https://mail.gnome.org/archives/gthumb-list/2020-September/msg00001.html"
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
18
2021/36xxx/CVE-2021-36794.json
Normal file
18
2021/36xxx/CVE-2021-36794.json
Normal file
@ -0,0 +1,18 @@
|
||||
{
|
||||
"data_type": "CVE",
|
||||
"data_format": "MITRE",
|
||||
"data_version": "4.0",
|
||||
"CVE_data_meta": {
|
||||
"ID": "CVE-2021-36794",
|
||||
"ASSIGNER": "cve@mitre.org",
|
||||
"STATE": "RESERVED"
|
||||
},
|
||||
"description": {
|
||||
"description_data": [
|
||||
{
|
||||
"lang": "eng",
|
||||
"value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
18
2021/36xxx/CVE-2021-36795.json
Normal file
18
2021/36xxx/CVE-2021-36795.json
Normal file
@ -0,0 +1,18 @@
|
||||
{
|
||||
"data_type": "CVE",
|
||||
"data_format": "MITRE",
|
||||
"data_version": "4.0",
|
||||
"CVE_data_meta": {
|
||||
"ID": "CVE-2021-36795",
|
||||
"ASSIGNER": "cve@mitre.org",
|
||||
"STATE": "RESERVED"
|
||||
},
|
||||
"description": {
|
||||
"description_data": [
|
||||
{
|
||||
"lang": "eng",
|
||||
"value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
18
2021/36xxx/CVE-2021-36796.json
Normal file
18
2021/36xxx/CVE-2021-36796.json
Normal file
@ -0,0 +1,18 @@
|
||||
{
|
||||
"data_type": "CVE",
|
||||
"data_format": "MITRE",
|
||||
"data_version": "4.0",
|
||||
"CVE_data_meta": {
|
||||
"ID": "CVE-2021-36796",
|
||||
"ASSIGNER": "cve@mitre.org",
|
||||
"STATE": "RESERVED"
|
||||
},
|
||||
"description": {
|
||||
"description_data": [
|
||||
{
|
||||
"lang": "eng",
|
||||
"value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
Loading…
x
Reference in New Issue
Block a user