CVE-2024-22590

CVE-2024-22590 affects Kwik, specifically version 745fd4e2, where the TLS engine does not track the current connection state. This can allow Client Hello messages to be overwritten at any time, including after a connection has been established. The PT-2024-19495 entry provides explicit details on...

CVE-2024-22590

The TLS engine in Kwik commit 745fd4e2 does not track the current state of the connection. This vulnerability can allow Client Hello messages to be overwritten at any time, including after a connection has been established...