CVE-2020-36475

HIGH

Mbed TLS < 2.25.0, < 2.16.9 LTS, < 2.7.18 LTS - Denial of Service via mbedtls_mpi_exp_mod Buffer Size Miscalculations

Title source: llm
STIX 2.1

Description

An issue was discovered in Mbed TLS before 2.25.0 (and before 2.16.9 LTS and before 2.7.18 LTS). The calculations performed by mbedtls_mpi_exp_mod are not limited; thus, supplying overly large parameters could lead to denial of service when generating Diffie-Hellman key pairs.

References (6)

Core 6
Core References
Mailing List, Third Party Advisory mailing-list
https://lists.debian.org/debian-lts-announce/2021/11/msg00021.html
Mailing List, Third Party Advisory mailing-list
https://lists.debian.org/debian-lts-announce/2022/12/msg00036.html
Release Notes, Third Party Advisory
https://github.com/ARMmbed/mbedtls/releases/tag/v2.16.9
Release Notes, Third Party Advisory
https://github.com/ARMmbed/mbedtls/releases/tag/v2.25.0
Release Notes, Third Party Advisory
https://github.com/ARMmbed/mbedtls/releases/tag/v2.7.18

Scores

CVSS v3 7.5
EPSS 0.0178
EPSS Percentile 75.3%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Details

CWE
CWE-131
Status published
Products (9)
arm/mbed_tls < 2.7.18
debian/debian_linux 9.0
debian/debian_linux 10.0
siemens/logo\!_cmr2020_firmware < 2.2
siemens/logo\!_cmr2040_firmware < 2.2
siemens/simatic_rtu3000c_firmware
siemens/simatic_rtu3030c_firmware
siemens/simatic_rtu3031c_firmware
siemens/simatic_rtu3041c_firmware
Published Aug 23, 2021
Tracked Since Feb 18, 2026