https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 06:32:18 +0000 https://cve.radiocsirt.org/vuln/bdu:2022-02039 bdu:2022-02039 https://cve.radiocsirt.org/vuln/bdu:2022-02039 https://cve.radiocsirt.org/vuln/certfr-2021-avi-706 certfr-2021-avi-706 https://cve.radiocsirt.org/vuln/certfr-2021-avi-706 https://cve.radiocsirt.org/vuln/cnvd-2021-71450 cnvd-2021-71450 https://cve.radiocsirt.org/vuln/cnvd-2021-71450 https://cve.radiocsirt.org/vuln/euvd-2026-48181 EUVD-2026-48181 https://cve.radiocsirt.org/vuln/euvd-2026-48181 https://cve.radiocsirt.org/vuln/fkie_cve-2020-36478 <p>An issue was discovered in Mbed TLS before 2.25.0 (and before 2.16.9 LTS and before 2.7.18 LTS). A NULL algorithm parameters entry looks identical to an array of REAL (size zero) and thus the certificate is considered valid. However, if the parameters do not match in any way, then the certificate should be considered invalid.</p> <p>An issue was discovered in Mbed TLS before 2.25.0 (and before 2.16.9 LTS and before 2.7.18 LTS). A NULL algorithm parameters entry looks identical to an array of REAL (size zero) and thus the certificate is considered valid. However, if the parameters do not match in any way, then the certificate should be considered invalid.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-36478 https://cve.radiocsirt.org/vuln/ghsa-8xrj-2854-7x44 <p>An issue was discovered in Mbed TLS before 2.25.0 (and before 2.16.9 LTS and before 2.7.18 LTS). A NULL algorithm parameters entry looks identical to an array of REAL (size zero) and thus the certificate is considered valid. However, if the parameters do not match in any way, then the certificate should be considered invalid.</p> <p>An issue was discovered in Mbed TLS before 2.25.0 (and before 2.16.9 LTS and before 2.7.18 LTS). A NULL algorithm parameters entry looks identical to an array of REAL (size zero) and thus the certificate is considered valid. However, if the parameters do not match in any way, then the certificate should be considered invalid.</p> https://cve.radiocsirt.org/vuln/ghsa-8xrj-2854-7x44 https://cve.radiocsirt.org/vuln/gsd-2020-36478 gsd-2020-36478 https://cve.radiocsirt.org/vuln/gsd-2020-36478 https://cve.radiocsirt.org/vuln/icsa-21-257-20 <p>The calculations performed in the third-party component Mbed TLS are not limited. Supplying overly large parameters could lead to denial-of-service condition when generating Diffie-Hellman key pairs.CVE-2020-36475 has been assigned to this vulnerability. A CVSS v3 base score of 7.5 has been assigned; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H). The affected product is vulnerable to a stack-based buffer overflow, which may allow an attacker to remotely execute arbitrary code.CVE-2020-36478 has been assigned to this vulnerability. A CVSS v3 base score of 7.5 has been assigned; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N).</p> <p>The calculations performed in the third-party component Mbed TLS are not limited. Supplying overly large parameters could lead to denial-of-service condition when generating Diffie-Hellman key pairs.CVE-2020-36475 has been assigned to this vulnerability. A CVSS v3 base score of 7.5 has been assigned; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H). The affected product is vulnerable to a stack-based buffer overflow, which may allow an attacker to remotely execute arbitrary code.CVE-2020-36478 has been assigned to this vulnerability. A CVSS v3 base score of 7.5 has been assigned; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N).</p> https://cve.radiocsirt.org/vuln/icsa-21-257-20 https://cve.radiocsirt.org/vuln/msrc_cve-2020-36478 msrc_CVE-2020-36478 https://cve.radiocsirt.org/vuln/msrc_cve-2020-36478 https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-36478 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: mbedtls, Ubuntu:Pro:18.04:LTS: mbedtls, Ubuntu:Pro:20.04:LTS: mbedtls</p> <p>An issue was discovered in Mbed TLS before 2.25.0 (and before 2.16.9 LTS and before 2.7.18 LTS). A NULL algorithm parameters entry looks identical to an array of REAL (size zero) and thus the certificate is considered valid. However, if the parameters do not match in any way, then the certificate should be considered invalid.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: mbedtls, Ubuntu:Pro:18.04:LTS: mbedtls, Ubuntu:Pro:20.04:LTS: mbedtls</p> <p>An issue was discovered in Mbed TLS before 2.25.0 (and before 2.16.9 LTS and before 2.7.18 LTS). A NULL algorithm parameters entry looks identical to an array of REAL (size zero) and thus the certificate is considered valid. However, if the parameters do not match in any way, then the certificate should be considered invalid.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-36478