admin/cvelist
1
0
Fork 0
mirror of https://github.com/CVEProject/cvelist.git synced 2025-05-06 18:53:08 +00:00
Code Issues Packages Projects Releases Wiki Activity

"-Synchronized-Data."

Browse Source
This commit is contained in:
CVE Team 2021-08-23 02:00:57 +00:00
parent 47bf0f3234
commit 9467c731ea
No known key found for this signature in database
GPG Key ID: 5708902F06FEF743
7 changed files with 342 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

72
2020/36xxx/CVE-2020-36475.json Normal file
View File

@ -0,0 +1,72 @@
{
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2020-36475",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "An issue was discovered in Mbed TLS before 2.25.0 (and before 2.16.9 LTS and before 2.7.18 LTS). The calculations performed by mbedtls_mpi_exp_mod are not limited; thus, supplying overly large parameters could lead to denial of service when generating Diffie-Hellman key pairs."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"url": "https://github.com/ARMmbed/mbedtls/releases/tag/v2.25.0",
"refsource": "MISC",
"name": "https://github.com/ARMmbed/mbedtls/releases/tag/v2.25.0"
},
{
"url": "https://github.com/ARMmbed/mbedtls/releases/tag/v2.16.9",
"refsource": "MISC",
"name": "https://github.com/ARMmbed/mbedtls/releases/tag/v2.16.9"
},
{
"url": "https://github.com/ARMmbed/mbedtls/releases/tag/v2.7.18",
"refsource": "MISC",
"name": "https://github.com/ARMmbed/mbedtls/releases/tag/v2.7.18"
}
]
}
}

72
2020/36xxx/CVE-2020-36476.json Normal file
View File

@ -0,0 +1,72 @@
{
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2020-36476",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "An issue was discovered in Mbed TLS before 2.24.0 (and before 2.16.8 LTS and before 2.7.17 LTS). There is missing zeroization of plaintext buffers in mbedtls_ssl_read to erase unused application data from memory."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"url": "https://github.com/ARMmbed/mbedtls/releases/tag/v2.7.17",
"refsource": "MISC",
"name": "https://github.com/ARMmbed/mbedtls/releases/tag/v2.7.17"
},
{
"url": "https://github.com/ARMmbed/mbedtls/releases/tag/v2.16.8",
"refsource": "MISC",
"name": "https://github.com/ARMmbed/mbedtls/releases/tag/v2.16.8"
},
{
"url": "https://github.com/ARMmbed/mbedtls/releases/tag/v2.24.0",
"refsource": "MISC",
"name": "https://github.com/ARMmbed/mbedtls/releases/tag/v2.24.0"
}
]
}
}

67
2020/36xxx/CVE-2020-36477.json Normal file
View File

@ -0,0 +1,67 @@
{
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2020-36477",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "An issue was discovered in Mbed TLS before 2.24.0. The verification of X.509 certificates when matching the expected common name (the cn argument of mbedtls_x509_crt_verify) with the actual certificate name is mishandled: when the subjecAltName extension is present, the expected name is compared to any name in that extension regardless of its type. This means that an attacker could impersonate a 4-byte or 16-byte domain by getting a certificate for the corresponding IPv4 or IPv6 address (this would require the attacker to control that IP address, though)."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"url": "https://github.com/ARMmbed/mbedtls/releases/tag/v2.24.0",
"refsource": "MISC",
"name": "https://github.com/ARMmbed/mbedtls/releases/tag/v2.24.0"
},
{
"url": "https://github.com/ARMmbed/mbedtls/issues/3498",
"refsource": "MISC",
"name": "https://github.com/ARMmbed/mbedtls/issues/3498"
}
]
}
}

77
2020/36xxx/CVE-2020-36478.json Normal file
View File

@ -0,0 +1,77 @@
{
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2020-36478",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "An issue was discovered in Mbed TLS before 2.25.0 (and before 2.16.9 LTS and before 2.7.18 LTS). A NULL algorithm parameters entry looks identical to an array of REAL (size zero) and thus the certificate is considered valid. However, if the parameters do not match in any way, then the certificate should be considered invalid."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"url": "https://github.com/ARMmbed/mbedtls/releases/tag/v2.25.0",
"refsource": "MISC",
"name": "https://github.com/ARMmbed/mbedtls/releases/tag/v2.25.0"
},
{
"url": "https://github.com/ARMmbed/mbedtls/releases/tag/v2.16.9",
"refsource": "MISC",
"name": "https://github.com/ARMmbed/mbedtls/releases/tag/v2.16.9"
},
{
"url": "https://github.com/ARMmbed/mbedtls/releases/tag/v2.7.18",
"refsource": "MISC",
"name": "https://github.com/ARMmbed/mbedtls/releases/tag/v2.7.18"
},
{
"url": "https://github.com/ARMmbed/mbedtls/issues/3629",
"refsource": "MISC",
"name": "https://github.com/ARMmbed/mbedtls/issues/3629"
}
]
}
}

18
2021/39xxx/CVE-2021-39374.json Normal file
View File

@ -0,0 +1,18 @@
{
"data_type": "CVE",
"data_format": "MITRE",
"data_version": "4.0",
"CVE_data_meta": {
"ID": "CVE-2021-39374",
"ASSIGNER": "cve@mitre.org",
"STATE": "RESERVED"
},
"description": {
"description_data": [
{
"lang": "eng",
"value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
}
]
}
}

18
2021/39xxx/CVE-2021-39375.json Normal file
View File

@ -0,0 +1,18 @@
{
"data_type": "CVE",
"data_format": "MITRE",
"data_version": "4.0",
"CVE_data_meta": {
"ID": "CVE-2021-39375",
"ASSIGNER": "cve@mitre.org",
"STATE": "RESERVED"
},
"description": {
"description_data": [
{
"lang": "eng",
"value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
}
]
}
}

18
2021/39xxx/CVE-2021-39376.json Normal file
View File

@ -0,0 +1,18 @@
{
"data_type": "CVE",
"data_format": "MITRE",
"data_version": "4.0",
"CVE_data_meta": {
"ID": "CVE-2021-39376",
"ASSIGNER": "cve@mitre.org",
"STATE": "RESERVED"
},
"description": {
"description_data": [
{
"lang": "eng",
"value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
}
]
}
}