CVE-2023-38505

DietPi-Dashboard (DietPi) suffers from an insufficient TLS handshake pool: when a TCP connection is established in HTTPS, the service waits for a handshake indefinitely, blocking all other TLS handshakes. In v0.6.1 this can be triggered by not starting the handshake, effectively denying legitimat...

CVE-2023-38505 DietPi-Dashboard Insufficient TLS Handshake Pool

DietPi-Dashboard is a web dashboard for the operating system DietPi. The dashboard only allows for one TLS handshake to be in process at a given moment. Once a TCP connection is established in HTTPS mode, it will assume that it should be waiting for a handshake, and will stay this way indefinitel...