Lucene search
+L

1 matches found

RedHat Linux
RedHat Linux
added 2026/09/01 5:43 a.m.6 views

crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages

A flaw was found in the crypto/tls package, part of golang. A malicious client can exploit this vulnerability by continuously sending KeyUpdate messages to a server. This forces the server to perform indefinite key derivation operations, leading to resource exhaustion and a Denial of Service DoS...

7.5CVSS5.9AI score0.00568EPSS
SaveExploits0References8
Rows per page
Query Builder