Lucene search
+L

2 matches found

Github Security Blog
Github Security Blog
•added 2026/09/08 6:14 p.m.•9 views

Netty: Fragmented ClientHello records trigger quadratic pre-handshake reassembly in default SNI parsing

Summary Netty's default SNI entrypoint reparses and recopies previously received ClientHello fragments on every additional TLS handshake record. A remote peer can send a small first record that advertises a large ClientHello length and then drip the body in many tiny records, causing superlinear...

8.7CVSS5.8AI score0.00689EPSS
SaveExploits0References9Affected Software1
Rows per page
Query Builder