Lucene search
+L

8 matches found

RedHat Linux
RedHat Linux
•added 2026/07/09 8:07 p.m.•24 views

crypto/tls: golang: Go crypto/tls: Information disclosure in Encrypted Client Hello

A flaw was found in the crypto/tls package in Go. Handshakes utilizing Encrypted Client Hello ECH could lead to de-anonymization by a passive network observer. This is due to the disclosure of pre-shared key identities within the unencrypted client hello, allowing an attacker to potentially link...

5.3CVSS5.6AI score0.00413EPSS
SaveExploits0References8
SUSE CVE
SUSE CVE
•added 2026/07/09 3:00 a.m.•16 views

SUSE CVE-2026-42505

Handshakes which used Encrypted Client Hello could be de-anonymized by a passive network observer due to a disclosure of pre-shared key identities in the unencrypted client hello...

5.3CVSS6.1AI score0.00413EPSS
SaveExploits0References13
NVD
NVD
•added 2026/07/08 5:17 p.m.•20 views

CVE-2026-42505

Handshakes which used Encrypted Client Hello could be de-anonymized by a passive network observer due to a disclosure of pre-shared key identities in the unencrypted client hello...

5.3CVSS0.00413EPSS
SaveExploits0References4
AlpineLinux
AlpineLinux
•added 2026/07/08 3:46 p.m.•20 views

CVE-2026-42505

Handshakes which used Encrypted Client Hello could be de-anonymized by a passive network observer due to a disclosure of pre-shared key identities in the unencrypted client hello...

5.3CVSS6.1AI score0.00413EPSS
SaveExploits0
EUVD
EUVD
•added 2026/07/08 3:46 p.m.•17 views

EUVD-2026-42317

Handshakes which used Encrypted Client Hello could be de-anonymized by a passive network observer due to a disclosure of pre-shared key identities in the unencrypted client hello...

5.3CVSS5.9AI score0.00413EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2026/07/08 3:46 p.m.•12 views

CVE-2026-42505 Invoking Encrypted Client Hello privacy leak in crypto/tls

Handshakes which used Encrypted Client Hello could be de-anonymized by a passive network observer due to a disclosure of pre-shared key identities in the unencrypted client hello...

5.9AI score0.00413EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2026/07/08 1:54 a.m.•33 views

crypto/tls: golang: Go crypto/tls: Information disclosure in Encrypted Client Hello

A flaw was found in the crypto/tls package in Go. Handshakes utilizing Encrypted Client Hello ECH could lead to de-anonymization by a passive network observer. This is due to the disclosure of pre-shared key identities within the unencrypted client hello, allowing an attacker to potentially link...

6.1AI score0.00413EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/08 12:00 a.m.•2 views

CVE-2026-42505: Insertion of Sensitive Information Into Sent Data

Handshakes which used Encrypted Client Hello could be de-anonymized by a passive network observer due to a disclosure of pre-shared key identities in the unencrypted client hello...

5.3CVSS5.8AI score0.00413EPSS
SaveExploits0References6
Rows per page
Query Builder