Security Advisory

CVE-2020-36475

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2021-08-23 00:00:00
Last updated 2024-08-04 17:30:08
Assigner mitre
State PUBLISHED

Description

An issue was discovered in Mbed TLS before 2.25.0 (and before 2.16.9 LTS and before 2.7.18 LTS). The calculations performed by mbedtls_mpi_exp_mod are not limited; thus, supplying overly large parameters could lead to denial of service when generating Diffie-Hellman key pairs.