High severity · published Aug 23, 2021
CVE-2020-36476
An issue was discovered in Mbed TLS before 2.24.0 (and before 2.16.8 LTS and before 2.7.17 LTS)
7.5
CVSS
1.6%
EPSS
No
On KEV
Description
An issue was discovered in Mbed TLS before 2.24.0 (and before 2.16.8 LTS and before 2.7.17 LTS). There is missing zeroization of plaintext buffers in mbedtls_ssl_read to erase unused application data from memory.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
High
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.6% · higher than 75% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DL
Debian Linux · Debian
9.0; 10.0 · source: NVD
MT
Mbed Tls · Arm
before 2.7.17; 2.8.0 before 2.16.8; 2.17.0 before 2.24.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2020-36476
CVE.org
https://www.cve.org/CVERecord?id=CVE-2020-36476
Release Notes
https://github.com/ARMmbed/mbedtls/releases/tag/v2.16.8
Release Notes
https://github.com/ARMmbed/mbedtls/releases/tag/v2.24.0
Release Notes
https://github.com/ARMmbed/mbedtls/releases/tag/v2.7.17
Mailing List
https://lists.debian.org/debian-lts-announce/2021/11/msg00021.html
Mailing List
https://lists.debian.org/debian-lts-announce/2022/12/msg00036.html
More from Mbed Tls
9.8
CVE-2026-34877
An issue was discovered in Mbed TLS versions from 2.19.0 up to 3.6.5, Mbed TLS 4.0.0
9.8
CVE-2025-47917
Mbed TLS before 3.6.4 allows a use-after-free in certain situations of applications that are developed in accordance with the documentation
9.8
CVE-2022-46393
An issue was discovered in Mbed TLS before 2.28.2 and 3.x before 3.3.0
9.8
CVE-2021-44732
Mbed TLS before 3.0.1 has a double free in certain out-of-memory conditions, as demonstrated by an mbedtls_ssl_set_session() failure
9.8
CVE-2017-18187
In ARM mbed TLS before 2.7.0, there is a bounds-check bypass through an integer overflow in PSK identity parsing in the ssl_parse_client_psk_identity() function in…