CVE-2020-36477 — Improper Certificate Validation in ARM Mbed TLS

CWE-295 — Improper Certificate Validation6 documents6 sources
Severity
5.9MEDIUMNVD
EPSS
0.1%
top 67.18%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Mbed MbedtlsARM Mbed TLS
Timeline
PublishedAug 23
Latest updateMay 24

Description

An issue was discovered in Mbed TLS before 2.24.0. The verification of X.509 certificates when matching the expected common name (the cn argument of mbedtls_x509_crt_verify) with the actual certificate name is mishandled: when the subjecAltName extension is present, the expected name is compared to any name in that extension regardless of its type. This means that an attacker could impersonate a 4-byte or 16-byte domain by getting a certificate for the corresponding IPv4 or IPv6 address (this wo…

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:NExploitability: 2.2 | Impact: 3.6

Affected Packages2 packages

▶NVDarm/mbed_tls< 2.24.0
▶Debianmbed/mbedtls< 2.28.0-0.3+2

🔴Vulnerability Details

3
GHSA
GHSA-qfcq-wvh3-6p75: An issue was discovered in Mbed TLS before 2↗2022-05-24
▶
OSV
CVE-2020-36477: An issue was discovered in Mbed TLS before 2↗2021-08-23
▶
CVEList
CVE-2020-36477: An issue was discovered in Mbed TLS before 2↗2021-08-23
▶

📋Vendor Advisories

2
Microsoft
An issue was discovered in Mbed TLS before 2.24.0. The verification of X.509 certificates when matching the expected common name (the cn argument of mbedtls_x509_crt_verify) with the actual certificat↗2021-08-10
▶
Debian
CVE-2020-36477: mbedtls - An issue was discovered in Mbed TLS before 2.24.0. The verification of X.509 cer...↗2020
▶
CVE-2020-36477 — Improper Certificate Validation in ARM | cvebase