388 matches found
tlsenum
tlsenum tlsenum is a command-line TLS enumeration tool that attempts to enumerate what TLS cipher suites a server supports and list them in order of priority. It works by sending out sending out TLS ClientHello messages and parsing the ServerHello responses from the server. tlsenum assumes that t...
CVE-2026-79896
Fortra BoKS Manager contains an out-of-bounds read vulnerability in the custom TLS ClientHello parser used by boksportmux. A remote unauthenticated attacker can submit a malformed ClientHello and terminate boksportmux. Although the daemon is normally restarted automatically, repeated requests can...
CVE-2026-79896 Fortra BoKS Manager boks_portmux TLS ClientHello out-of-bounds read vulnerability
Fortra BoKS Manager contains an out-of-bounds read vulnerability in the custom TLS ClientHello parser used by boksportmux. A remote unauthenticated attacker can submit a malformed ClientHello and terminate boksportmux. Although the daemon is normally restarted automatically, repeated requests can...
CVE-2026-79896
Fortra BoKS Manager is vulnerable to an out-of-bounds read in the custom TLS ClientHello parser utilized by boks_portmux . A remote unauthenticated attacker can exploit this by submitting a malformed ClientHello to terminate the boks_portmux daemon. While the daemon typically restarts automatical...
EUVD-2026-90881
Fortra BoKS Manager contains an out-of-bounds read vulnerability in the custom TLS ClientHello parser used by boksportmux. A remote unauthenticated attacker can submit a malformed ClientHello and terminate boksportmux. Although the daemon is normally restarted automatically, repeated requests can...
CVE-2026-79896 Fortra BoKS Manager boks_portmux TLS ClientHello out-of-bounds read vulnerability
Fortra BoKS Manager contains an out-of-bounds read vulnerability in the custom TLS ClientHello parser used by boksportmux. A remote unauthenticated attacker can submit a malformed ClientHello and terminate boksportmux. Although the daemon is normally restarted automatically, repeated requests can...
cve-2021-3449
CVE-2021-3449 OpenSSL This issue was reported to OpenSSL on 17th March 2021 by Nokia. The fix was developed by Peter Kästle and Samuel Sapalski from Nokia. Mitigation The only known fix is to update libssl1.1. Even though some applications use hardened TLS configurations by default that disable T...
CVE-2026-102712
On the first DTLS ClientHello, the parser copies a device-claimed sessionid length and validates the ciphersuite-list length against the total record length instead of the remaining bytes. An unauthenticated peer drives an OOB source read of up to 255 bytes, and those bytes are echoed verbatim in...
CVE-2026-102712
On the first DTLS ClientHello, the parser copies a device-claimed sessionid length and validates the ciphersuite-list length against the total record length instead of the remaining bytes. An unauthenticated peer drives an OOB source read of up to 255 bytes, and those bytes are echoed verbatim in...
CVE-2026-102712
On the first DTLS ClientHello, the parser copies a device-claimed sessionid length and validates the ciphersuite-list length against the total record length instead of the remaining bytes. An unauthenticated peer drives an OOB source read of up to 255 bytes, and those bytes are echoed verbatim in...
CVE-2026-102712: Out-of-bounds Read
On the first DTLS ClientHello, the parser copies a device-claimed sessionid length and validates the ciphersuite-list length against the total record length instead of the remaining bytes. An unauthenticated peer drives an OOB source read of up to 255 bytes, and those bytes are echoed verbatim in...
io.netty/netty-handler: Netty: SNI Routing Bypass via Fragmented TLS ClientHello Causing Fallback to Default SslContext
A flaw was found in Netty, an asynchronous, event-driven network application framework. An unauthenticated remote attacker can exploit fragmented Transport Layer Security TLS ClientHello messages to bypass the Server Name Indication SNI routing mechanism. This forces a fallback to a less secure...
CVE-2026-88840
BusyBox TLS getclienthello reads past the end of the input buffer when parsing a truncated ClientHello message...
UBUNTU-CVE-2026-88840
BusyBox TLS getclienthello reads past the end of the input buffer when parsing a truncated ClientHello message...
CVE-2026-88840
BusyBox TLS getclienthello reads past the end of the input buffer when parsing a truncated ClientHello message...
CVE-2026-88840
The BusyBox TLS implementation contains an out-of-bounds read vulnerability in the get_client_hello() function. The issue occurs when the software attempts to parse a truncated ClientHello message , causing the system to read past the end of the input buffer. This vulnerability is specifically as...
EUVD-2026-85513
BusyBox TLS getclienthello reads past the end of the input buffer when parsing a truncated ClientHello message...
CVE-2026-88840 Busybox: busybox: tls ssl_server reads one byte out of bounds when parsing truncated clienthello
BusyBox TLS getclienthello reads past the end of the input buffer when parsing a truncated ClientHello message...
CVE-2026-88840
BusyBox TLS getclienthello reads past the end of the input buffer when parsing a truncated ClientHello message...
CVE-2026-88840 Busybox: busybox: tls ssl_server reads one byte out of bounds when parsing truncated clienthello
BusyBox TLS getclienthello reads past the end of the input buffer when parsing a truncated ClientHello message...