2 matches found
Netty: Fragmented ClientHello records trigger quadratic pre-handshake reassembly in default SNI parsing
Summary Netty's default SNI entrypoint reparses and recopies previously received ClientHello fragments on every additional TLS handshake record. A remote peer can send a small first record that advertises a large ClientHello length and then drip the body in many tiny records, causing superlinear...
8.7CVSS5.8AI score0.00689EPSS
SaveExploits0References9Affected Software1
20