Lucene search
+L

7 matches found

OSV
OSV
•added 2026/10/09 10:48 a.m.•6 views

BIT-LIBPYTHON-2026-19445 Use-after-free of a server-side SSLContext when sni_callback switches contexts

A remote, unauthenticated TLS client can make a server crash or call through a freed pointer if its snicallback assigns a different context to SSLSocket.context the documented way to select a certificate per server name and nothing else keeps the original ssl.SSLContext alive. Typical cases are...

9.2CVSS5.9AI score0.00429EPSS
SaveExploits1References12
Rows per page
Query Builder