Lucene search
+L

10 matches found

osv_debian
osv_debian
•added 2023/07/17 10:15 p.m.•14 views

DEBIAN-CVE-2023-3724

If a TLS 1.3 client gets neither a PSK pre shared key extension nor a KSE key share extension when connecting to a malicious server, a default predictable buffer gets used for the IKM Input Keying Material value when generating the session master secret. Using a potentially known IKM value when...

8.8CVSS8.3AI score0.00652EPSS
SaveExploits0References1
NVD
NVD
•added 2023/07/17 10:15 p.m.•33 views

CVE-2023-3724

If a TLS 1.3 client gets neither a PSK pre shared key extension nor a KSE key share extension when connecting to a malicious server, a default predictable buffer gets used for the IKM Input Keying Material value when generating the session master secret. Using a potentially known IKM value when...

9.1CVSS0.00652EPSS
SaveExploits0References2
Prion
Prion
•added 2023/07/17 10:15 p.m.•34 views

Input validation

If a TLS 1.3 client gets neither a PSK pre shared key extension nor a KSE key share extension when connecting to a malicious server, a default predictable buffer gets used for the IKM Input Keying Material value when generating the session master secret. Using a potentially known IKM value when...

6.5CVSS8.7AI score0.00652EPSS
SaveExploits0References2Affected Software1
UbuntuCve
UbuntuCve
•added 2023/07/17 10:15 p.m.•26 views

CVE-2023-3724

If a TLS 1.3 client gets neither a PSK pre shared key extension nor a KSE key share extension when connecting to a malicious server, a default predictable buffer gets used for the IKM Input Keying Material value when generating the session master secret. Using a potentially known IKM value when...

9.1CVSS7.3AI score0.00652EPSS
SaveExploits0References3
osv_ubuntu
osv_ubuntu
•added 2023/07/17 10:15 p.m.•16 views

UBUNTU-CVE-2023-3724

If a TLS 1.3 client gets neither a PSK pre shared key extension nor a KSE key share extension when connecting to a malicious server, a default predictable buffer gets used for the IKM Input Keying Material value when generating the session master secret. Using a potentially known IKM value when...

9.1CVSS6AI score0.00652EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2023/07/17 9:13 p.m.•35 views

CVE-2023-3724 TLS 1.3 client issue handling malicious server when not including a KSE and PSK extension

If a TLS 1.3 client gets neither a PSK pre shared key extension nor a KSE key share extension when connecting to a malicious server, a default predictable buffer gets used for the IKM Input Keying Material value when generating the session master secret. Using a potentially known IKM value when...

9.1CVSS9.4AI score0.00652EPSS
SaveExploits0References2
Mend
Mend
•added 2023/07/17 9:13 p.m.•13 views

CVE-2023-3724

If a TLS 1.3 client gets neither a PSK pre shared key extension nor a KSE key share extension when connecting to a malicious server, a default predictable buffer gets used for the IKM Input Keying Material value when generating the session master secret. Using a potentially known IKM value when...

9.4CVSS0.00652EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2023/07/17 9:13 p.m.•24 views

CVE-2023-3724 TLS 1.3 client issue handling malicious server when not including a KSE and PSK extension

If a TLS 1.3 client gets neither a PSK pre shared key extension nor a KSE key share extension when connecting to a malicious server, a default predictable buffer gets used for the IKM Input Keying Material value when generating the session master secret. Using a potentially known IKM value when...

9.1CVSS6.9AI score0.00652EPSS
SaveExploits0References2
AlpineLinux
AlpineLinux
•added 2023/07/17 9:13 p.m.•50 views

CVE-2023-3724

If a TLS 1.3 client gets neither a PSK pre shared key extension nor a KSE key share extension when connecting to a malicious server, a default predictable buffer gets used for the IKM Input Keying Material value when generating the session master secret. Using a potentially known IKM value when...

9.1CVSS9.1AI score0.00652EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/07/17 12:00 a.m.•4 views

CVE-2023-3724: Improper Input Validation

If a TLS 1.3 client gets neither a PSK pre shared key extension nor a KSE key share extension when connecting to a malicious server, a default predictable buffer gets used for the IKM Input Keying Material value when generating the session master secret. Using a potentially known IKM value when...

9.1CVSS8AI score0.00652EPSS
SaveExploits0References3
Rows per page
Query Builder