UBUNTU-CVE-2024-5814

A malicious TLS1.2 server can force a TLS1.3 client with downgrade capability to use a ciphersuite that it did not agree to and achieve a successful connection. This is because, aside from the extensions, the client was skipping fully parsing the server hello...

CVE-2024-5814

A malicious TLS1.2 server can force a TLS1.3 client with downgrade capability to use a ciphersuite that it did not agree to and achieve a successful connection. This is because, aside from the extensions, the client was skipping fully parsing the server hello...

CVE-2024-5814

A malicious TLS1.2 server can force a TLS1.3 client with downgrade capability to use a ciphersuite that it did not agree to and achieve a successful connection. This is because, aside from the extensions, the client was skipping fully parsing the server hello...

CVE-2024-5814 Unverifed Ciphersuite used on a client-side TLS1.3 Downgrade

A malicious TLS1.2 server can force a TLS1.3 client with downgrade capability to use a ciphersuite that it did not agree to and achieve a successful connection. This is because, aside from the extensions, the client was skipping fully parsing the server hello...

CVE-2024-5814

A malicious TLS1.2 server can force a TLS1.3 client with downgrade capability to use a ciphersuite that it did not agree to and achieve a successful connection. This is because, aside from the extensions, the client was skipping fully parsing the server hello...

CVE-2024-5814 Unverifed Ciphersuite used on a client-side TLS1.3 Downgrade

A malicious TLS1.2 server can force a TLS1.3 client with downgrade capability to use a ciphersuite that it did not agree to and achieve a successful connection. This is because, aside from the extensions, the client was skipping fully parsing the server hello...

CVE-2024-5814: Improper Access Control

A malicious TLS1.2 server can force a TLS1.3 client with downgrade capability to use a ciphersuite that it did not agree to and achieve a successful connection. This is because, aside from the extensions, the client was skipping fully parsing the server hello...

PT-2024-6326

Name of the Vulnerable Software and Affected Versions WolfSSL affected versions not specified Description A malicious TLS1.2 server can force a TLS1.3 client with downgrade capability to use a ciphersuite that it did not agree to and achieve a successful connection. This is because, aside from th...

DEBIAN-CVE-2023-6937

wolfSSL prior to 5.6.6 did not check that messages in one DTLS record do not span key boundaries. As a result, it was possible to combine DTLS messages using different keys into one DTLS record. The most extreme edge case is that, in DTLS 1.3, it was possible that an unencrypted DTLS 1.3 record...

PT-2024-15131

Name of the Vulnerable Software and Affected Versions wolfSSL versions prior to 5.6.6 Description The issue arises from the failure to check that messages in one DTLS record do not span key boundaries, allowing the combination of DTLS messages using different keys into one DTLS record. In the mos...

PT-2023-35669 · Git +1 · Ndpi

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow READ 2 crash has been reported. The crash occurs in the processClientServerHello function, specifically in the process tls and fuz...

PT-2023-35667 · Git +1 · Ndpi

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow read issue is identified, potentially causing a crash. The crash occurs in the processClientServerHello and processTLSBlock...

SUSE CVE-2014-3466

Buffer overflow in the readserverhello function in lib/gnutlshandshake.c in GnuTLS before 3.1.25, 3.2.x before 3.2.15, and 3.3.x before 3.3.4 allows remote servers to cause a denial of service memory corruption or possibly execute arbitrary code via a long session id in a ServerHello message...

SUSE CVE-2014-5139

The sslsetclientdisabled function in t1lib.c in OpenSSL 1.0.1 before 1.0.1i allows remote SSL servers to cause a denial of service NULL pointer dereference and client application crash via a ServerHello message that includes an SRP ciphersuite without the required negotiation of that ciphersuite...

GO-2023-1535 Panic during unmarshal of Server Hello in github.com/pion/dtls/v2

Unmarshalling a Server Hello can panic, which could allow a denial of service...

Denial Of Service (DoS)

github.com/pion/dtls is vulnerable to Denial Of Service DoS. The vulnerability exists in Unmarshal function due to out of bounds read via the server hello response which can result in an application crash...

CVE-2021-36082

ntop nDPI 3.4 has a stack-based buffer overflow in processClientServerHello...

UBUNTU-CVE-2021-36082

ntop nDPI 3.4 has a stack-based buffer overflow in processClientServerHello...

picotls/fuzz-server-hello: Heap-buffer-overflow in ptls_set_negotiated_protocol

Project: https://github.com/h2o/picotls.git Detailed report: https://oss-fuzz.com/testcase?key=5123788977471488 Project: picotls Fuzzer: libFuzzerpicotlsfuzz-server-hello Fuzz target binary: fuzz-server-hello Job Type: libfuzzerasanpicotls Platform Id: linux Crash Type: Heap-buffer-overflow READ...

The vulnerability of the OpenSSL software allows a malicious attacker to compromise the accessibility of protected information.

The vulnerability in the sslsetclientdisabled function in t1lib.c of OpenSSL allows remote SSL servers to trigger a service failure by replacing the null pointer and terminating the client application abnormally, using the ServerHello message. This message includes the SRP crypto packet without...