Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2025/04/23 2:43 p.m.26 views

uTLS ServerHellos are accepted without checking TLS 1.3 downgrade canaries

Description Before version 1.7.0, utls did not implement the TLS 1.3 downgrade protection mechanism specified in RFC 8446 Section 4.1.3 when using a utls ClientHello spec. This allowed an active network adversary to downgrade TLS 1.3 connections initiated by a utls client to a lower TLS version...

6.5CVSS6.9AI score0.00268EPSS
SaveExploits0References6Affected Software1
Rows per page
Query Builder