2 matches found
erlang: Erlang/OTP: Denial of Service in TLS 1.3 session ticket handling
A flaw was found in Erlang/OTP's SSL Secure Sockets Layer application. An unauthenticated remote attacker can send a specially crafted ClientHello message to a TLS 1.3 server with session tickets enabled. This can permanently disrupt the server's ability to handle session tickets, leading to a...
8.2CVSS5.8AI score0.00481EPSS
SaveExploits0References11
EUVD-2025-34607
In NetX Duo version before 6.4.4, the component of Eclipse Foundation ThreadX, there was a potential out of bound read in nxsecuretlsprocessclienthello because of a missing validation of PSK length provided in the user message...
6.9CVSS6.2AI score0.00251EPSS
SaveExploits0References1
20