golang: crypto/tls: large handshake records may cause panics

A flaw was found in Golang Go, where it is vulnerable to a denial of service caused when processing large TLS handshake records. By sending specially-crafted TLS handshake records, a remote, authenticated attacker can cause a denial of service condition...

golang: crypto/tls: large handshake records may cause panics

A flaw was found in Golang Go, where it is vulnerable to a denial of service caused when processing large TLS handshake records. By sending specially-crafted TLS handshake records, a remote, authenticated attacker can cause a denial of service condition...

Denial Of Service (DoS)

github.com/projectcalico/calico is vulnerable to Denial Of Service DoS. The vulnerability exists because the TLS Handshake call is executed within the main server handle loop without any timeout mechanism. This means that an incomplete or unclean TLS handshake can potentially block the main loop...

RHEL 9 : podman (RHSA-2023:6474)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:6474 advisory. The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use contain...

RHEL 9 : buildah (RHSA-2023:6473)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:6473 advisory. The buildah package provides a tool for facilitating building OCI container images. Among other things, buildah enables you to: Create a...

RHEL 9 : runc (RHSA-2023:6380)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2023:6380 advisory. The runC tool is a lightweight, portable implementation of the Open Container Format OCF that provides container runtime. Security Fixes:...

RHEL 9 : containernetworking-plugins (RHSA-2023:6402)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2023:6402 advisory. The Container Network Interface CNI project consists of a specification and libraries for writing plug- ins for configuring network interfac...

Fedora 39 : curl (2023-0f8d1871d8)

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-0f8d1871d8 advisory. - fix cookie injection with none file CVE-2023-38546 - fix SOCKS5 heap buffer overflow CVE-2023-38545 Tenable has extracted the preceding descriptio...

Calico Typha denial of service vulnerability

In certain conditions for Calico Typha v3.26.2, v3.25.1 and below, and Calico Enterprise Typha v3.17.1, v3.16.3, v3.15.3 and below, a client TLS handshake can block the Calico Typha server indefinitely, resulting in denial of service. The TLS Handshake call is performed inside the main server...

GHSA-5R5H-Q934-CCCP Calico Typha denial of service vulnerability

In certain conditions for Calico Typha v3.26.2, v3.25.1 and below, and Calico Enterprise Typha v3.17.1, v3.16.3, v3.15.3 and below, a client TLS handshake can block the Calico Typha server indefinitely, resulting in denial of service. The TLS Handshake call is performed inside the main server...

CVE-2023-41378

In certain conditions for Calico Typha v3.26.2, v3.25.1 and below, and Calico Enterprise Typha v3.17.1, v3.16.3, v3.15.3 and below, a client TLS handshake can block the Calico Typha server indefinitely, resulting in denial of service. The TLS Handshake call is performed inside the main server...

Design/Logic Flaw

In certain conditions for Calico Typha v3.26.2, v3.25.1 and below, and Calico Enterprise Typha v3.17.1, v3.16.3, v3.15.3 and below, a client TLS handshake can block the Calico Typha server indefinitely, resulting in denial of service. The TLS Handshake call is performed inside the main server...

CVE-2023-41378 Calico Typha hangs during unclean TLS handshake

In certain conditions for Calico Typha v3.26.2, v3.25.1 and below, and Calico Enterprise Typha v3.17.1, v3.16.3, v3.15.3 and below, a client TLS handshake can block the Calico Typha server indefinitely, resulting in denial of service. The TLS Handshake call is performed inside the main server...

CVE-2023-41378 Calico Typha hangs during unclean TLS handshake

In certain conditions for Calico Typha v3.26.2, v3.25.1 and below, and Calico Enterprise Typha v3.17.1, v3.16.3, v3.15.3 and below, a client TLS handshake can block the Calico Typha server indefinitely, resulting in denial of service. The TLS Handshake call is performed inside the main server...

CVE-2023-41378

The CVE-2023-41378 issue affects Calico Typha (v3.26.2, v3.25.1 and below) and Calico Enterprise Typha (v3.17.1, v3.16.3, v3.15.3 and below). The vulnerability arises because the TLS Handshake() is performed inside the main server loop without a timeout, allowing an unclean TLS handshake to block...

CVE-2023-41378 Calico Typha hangs during unclean TLS handshake

In certain conditions for Calico Typha v3.26.2, v3.25.1 and below, and Calico Enterprise Typha v3.17.1, v3.16.3, v3.15.3 and below, a client TLS handshake can block the Calico Typha server indefinitely, resulting in denial of service. The TLS Handshake call is performed inside the main server...

Security Bulletin: Due to use of Netty, IBM® MobileFirst Platform is vulnerable to a denial of service.

Summary Netty is used by IBM® MobileFirst Platform. CVE-2023-34462 Vulnerability Details CVEID:CVE-2023-34462 DESCRIPTION: Netty is vulnerable to a denial of service, caused by a flaw with allocating up to 16MB of heap for each channel during the TLS handshake the SniHandler class. By sending a...

PT-2023-27936 · Calico · Calico Typha +1

Name of the Vulnerable Software and Affected Versions: Calico Typha versions 3.26.2 and below Calico Typha version 3.25.1 Calico Enterprise Typha versions 3.17.1 and below Calico Enterprise Typha version 3.16.3 Calico Enterprise Typha version 3.15.3 Description: The issue arises when a client TLS...

Fedora: Security Advisory for fizz (FEDORA-2023-7934802344)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 39 Update: fizz-2023.10.16.00-1.fc39

Fizz is a TLS 1.3 implementation. Fizz currently supports TLS 1.3 drafts 28, 26 both wire-compatible with the final specification, and 23. All major handshake modes are supported, includ ing PSK resumption, early data, client authentication, and HelloRetryRequest...