Lucene search
K

8 matches found

Snyk
Snyk
added 2025/09/05 10:41 p.m.1 views

Improper Resource Shutdown or Release

Overview Affected versions of this package are vulnerable to Improper Resource Shutdown or Release after establishing a TLS session. An attacker can cause excessive CPU utilization by initiating a half-shutdown of the connection during the handshake, leading the peer to enter a spin loop on socke...

8.7CVSS6.3AI score0.00207EPSS
Exploits0References2
Snyk
Snyk
added 2025/09/05 10:41 p.m.2 views

Improper Resource Shutdown or Release

Overview Affected versions of this package are vulnerable to Improper Resource Shutdown or Release after establishing a TLS session. An attacker can cause excessive CPU utilization by initiating a half-shutdown of the connection during the handshake, leading the peer to enter a spin loop on socke...

8.7CVSS6.3AI score0.00207EPSS
Exploits0References2
Snyk
Snyk
added 2025/09/05 10:41 p.m.1 views

Improper Resource Shutdown or Release

Overview Affected versions of this package are vulnerable to Improper Resource Shutdown or Release after establishing a TLS session. An attacker can cause excessive CPU utilization by initiating a half-shutdown of the connection during the handshake, leading the peer to enter a spin loop on socke...

8.7CVSS6.8AI score0.00207EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/09/05 9:59 p.m.6 views

CVE-2025-58369 fs2: Half-shutdown of socket during TLS handshake may result in spin loop on opposite side

fs2 is a compositional, streaming I/O library for Scala. Versions up to and including 2.5.12, 3.0.0-M1 through 3.12.2, and 3.13.0-M1 through 3.13.0-M6 are vulnerable to denial of service attacks though TLS sessions using fs2-io on the JVM using the fs2.io.net.tls package. When establishing a TLS...

5.3CVSS0.00207EPSS
Exploits0References7
Vulnrichment
Vulnrichment
added 2025/09/05 9:59 p.m.1 views

CVE-2025-58369 fs2: Half-shutdown of socket during TLS handshake may result in spin loop on opposite side

fs2 is a compositional, streaming I/O library for Scala. Versions up to and including 2.5.12, 3.0.0-M1 through 3.12.2, and 3.13.0-M1 through 3.13.0-M6 are vulnerable to denial of service attacks though TLS sessions using fs2-io on the JVM using the fs2.io.net.tls package. When establishing a TLS...

5.3CVSS5.9AI score0.00207EPSS
Exploits0References7
OSV
OSV
added 2025/09/05 8:58 p.m.0 views

GHSA-RRW2-PX9J-QFFJ FS2 half-shutdown of socket during TLS handshake may result in spin loop on opposite side

Impact When establishing a TLS session using fs2-io on the JVM using the fs2.io.net.tls package, if one side of the connection shuts down write while the peer side is awaiting more data to progress the TLS handshake, the peer side will spin loop on the socket read, fully utilizing a CPU. This CPU...

5.3CVSS5.9AI score0.00207EPSS
Exploits0References10
Github Security Blog
Github Security Blog
added 2025/09/05 8:58 p.m.5 views

FS2 half-shutdown of socket during TLS handshake may result in spin loop on opposite side

Impact When establishing a TLS session using fs2-io on the JVM using the fs2.io.net.tls package, if one side of the connection shuts down write while the peer side is awaiting more data to progress the TLS handshake, the peer side will spin loop on the socket read, fully utilizing a CPU. This CPU...

5.3CVSS6.8AI score0.00207EPSS
Exploits0References10Affected Software11
Debian CVE
Debian CVE
added 2024/02/24 2:56 p.m.31 views

CVE-2024-26603

In the Linux kernel, the following vulnerability has been resolved: x86/fpu: Stop relying on userspace for info to fault in xsave buffer Before this change, the expected size of the user space buffer was taken from fxsw-xstatesize. fxsw-xstatesize can be changed from user-space, so it is possible...

5.5CVSS7.7AI score0.00006EPSS
Exploits0
Rows per page
Query Builder