CVE:CVE-2020-36423
CNNVD:CNNVD-202107-1290
ARM mbed TLS是英国ARM公司的一款为mbed产品提供安全通讯和加密功能的产品。
Arm Mbed TLS 2.23.0之前版本存在安全漏洞，远程攻击者可以利用该漏洞恢复明文数据。
solution:Upgrade arm mbed_tls to a higher version than 2.16.7,2.23.0,and avoid the version (,2.16.7),[2.17.0,2.23.0); Upgrade debian debian_linux to a higher version than 10.0,and avoid the version 10.0