netty-handler: Netty: Denial of Service due to eager buffer allocation in TLS handshake

A flaw was found in Netty, a network application framework. A remote attacker can exploit this vulnerability by sending a crafted TLS Transport Layer Security ClientHello message. This can lead to an eager allocation of a large memory buffer, causing a Denial of Service DoS due to excessive memor...

netty-handler: Netty: Denial of Service due to eager buffer allocation in TLS handshake

A flaw was found in Netty, a network application framework. A remote attacker can exploit this vulnerability by sending a crafted TLS Transport Layer Security ClientHello message. This can lead to an eager allocation of a large memory buffer, causing a Denial of Service DoS due to excessive memor...

CVE-2026-0257

CVE-2026-0257: GlobalProtect 認証バイパス 概要 このエクスプロイトは、サーバーの公開されているTLS証明書 のみを使用して認証クッキーを偽造することで、Palo Alto GlobalProtect ゲートウェイ/ポータルへの未認証VPNアクセス を実現します。 核心となる脆弱性（なぜ機能するのか） GlobalProtect は、クライアントの認証を可能にする事前認証クッキー （portal-userauthcookie）を使用しています。ここに致命的な欠陥があります： Normal Flow: 1. Client authenticates userna...

SUSE-SU-2026:4544-1 Security update for libtcnative-1-0, tomcat11

This update for libtcnative-1-0, tomcat11 fixes the following issues: Security issues fixed: libtcnative-1-0: - CVE-2026-86243: buffer overread during the TLS handshake permits a malicious user to trigger a DoS via a JVM crash bsc1282623. - CVE-2026-86246: insecure ALLOWCLIENTRENEGOTIATION,...

DEBIAN-CVE-2026-98274

In the Linux kernel, the following vulnerability has been resolved: net: psp: avoid conflicts with skb-decrypted and skvalidatexmitskb PSP conflicts with TLS ULP in its usage of both skb-decrypted and sk-skvalidatexmitskb. Make PSP mutually exclusive with TLS ULP, the only other user of either of...

CVE-2026-98274

In the Linux kernel, the following vulnerability has been resolved: net: psp: avoid conflicts with skb-decrypted and skvalidatexmitskb PSP conflicts with TLS ULP in its usage of both skb-decrypted and sk-skvalidatexmitskb. Make PSP mutually exclusive with TLS ULP, the only other user of either of...

CVE-2026-98274

In the Linux kernel, the following vulnerability has been resolved: net: psp: avoid conflicts with skb-decrypted and skvalidatexmitskb PSP conflicts with TLS ULP in its usage of both skb-decrypted and sk-skvalidatexmitskb. Make PSP mutually exclusive with TLS ULP, the only other user of either of...

CVE-2026-98274 net: psp: avoid conflicts with skb->decrypted and sk_validate_xmit_skb()

In the Linux kernel, the following vulnerability has been resolved: net: psp: avoid conflicts with skb-decrypted and skvalidatexmitskb PSP conflicts with TLS ULP in its usage of both skb-decrypted and sk-skvalidatexmitskb. Make PSP mutually exclusive with TLS ULP, the only other user of either of...

CVE-2026-98274

The Linux kernel contains a conflict between PSP and the TLS ULP regarding the usage of skb->decrypted and sk->sk_validate_xmit_skb(). To resolve this, PSP is made mutually exclusive with TLS ULP. The fix involves including all TCP ULPs in the sk_has_decrypt_user() check to close potential ...

EUVD-2026-93202

In the Linux kernel, the following vulnerability has been resolved: net: psp: avoid conflicts with skb-decrypted and skvalidatexmitskb PSP conflicts with TLS ULP in its usage of both skb-decrypted and sk-skvalidatexmitskb. Make PSP mutually exclusive with TLS ULP, the only other user of either of...

cve-2020-13777

CVE-2020-13777을 위한 Zeek 테스트 스크립트 이 스크립트는 서버가 CVE-2020-13777에 잠재적으로 취약한지 확인하기 위한 간단한 테스트를 수행합니다. CVE-2020-13777은 GnuTLS가 암호화되지 않은 세션 티켓을 생성하도록 합니다. 이는 gnutls가 keyname을 0으로 설정하는지 확인함으로써 감지할 수 있는 것으로 보입니다. 이때 세션 티켓의 처음 16바이트를 사용합니다. 이 스크립트는 다음을 확인합니다: 서버가 의심스러운 세션 티켓을 보냅니다 클라이언트가 의심스러운 세션 티켓을 사용하여 서...

CVE-2026-105221

A flaw was found in gist. The utility completely disables Transport Layer Security TLS certificate verification when establishing HTTPS connections. An on-path attacker can exploit this flaw by presenting an arbitrary certificate to intercept, read, and manipulate network traffic. This can lead t...

CVE-2026-8932

🚨 CVE-2026-8932 - libcurl에서 가장 오래된 보안 버그 libcurl의 불완전한 mTLS 구성 일치 libcurl에서 수정된 가장 오래된 보안 취약점—25년 넘게 발견되지 않음. 📖 개요 CVE-2026-8932 는 libcurl 의 보안 취약점으로, 상호 TLS mTLS 클라이언트 인증 설정이 변경된 후 라이브러리가 기존 TLS 연결을 잘못 재사용할 수 있습니다. 특정 개인 키 관련 옵션 이 libcurl의 연결 일치 로직에 포함되지 않았기 때문에, 다른 클라이언트 인증서 구성에서 새로운 TLS 핸드셰이크가...

USN-8866-1: Redis vulnerabilities

It was discovered that Redis did not properly manage memory when handling the TLS pending-data list. A remote attacker could possibly use this issue to execute arbitrary code. CVE-2026-81934 It was discovered that Redis incorrectly handled certain inputs when processing cluster bus packets. A...

USN-8866-1 redis vulnerabilities

It was discovered that Redis did not properly manage memory when handling the TLS pending-data list. A remote attacker could possibly use this issue to execute arbitrary code. CVE-2026-81934 It was discovered that Redis incorrectly handled certain inputs when processing cluster bus packets. A...

SSLPatch

SSL Patch CVE-2014-1266 著作権 c 2014 Linus Yang はじめに CVE-2014-1266 、別名「goto fail SSL 検証の脆弱性」として知られる、iOS および OS X の非常に深刻な SSL/TLS 脆弱性です。Apple はこの問題を修正するために iOS 6.1.6 と 7.0.6 をリリースしましたが、iOS 7 にアップグレードできない、またはアップグレードしたくない一部のユーザー（例: 古いデバイスのユーザー、iOS 7 が嫌いな人 :P）は無視されています。 ついに、ここにエレガントな解決策があります。特に iOS...

AcrStealer-Custom-Protocol-Credential-Theft-Payload-Extraction-Analysis

1. ネットワーク接続とSSL/TLS設定 Process Hackerのメモリ分析により、AcrStealerはC2サーバーとの安全な通信にSSL/TLSを使用してネットワーク接続を確立することが明らかになりました。 主な観察事項: SslClientCert – 認証にクライアント証明書を使用（検出を回避）。 EnabledProtocols – サポートされているTLSプロトコルを指定（例：TLS 1.2、1.3）。 EnabledRevertToSelfClientCertificate – 自己署名証明書へのフォールバックを許可。 Connection / DataChunks...

CLEANSTART-2026-DX00522 If one side of the TLS connection sends multiple key update messages post-handshake in a single record, the connection can deadlock, causing uncontrolled consumption of resources

Security vulnerability affects the temporal-server package. If one side of the TLS connection sends multiple key update messages post-handshake in a single record, the connection can deadlock, causing uncontrolled consumption of resources...

CLEANSTART-2026-YX19241 During session resumption in crypto/tls, if the underlying Config has its ClientCAs or RootCAs fields mutated between the initial handshake and the resumed handshake, the resumed handshake may succ...

Security vulnerability affects the go1.27 package. During session resumption in crypto/tls, if the underlying Config has its ClientCAs or RootCAs fields mutated between the initial handshake and the resumed handshake, the resumed handshake may succeed when it should have failed...

ROS-20261006-73-0059

The vulnerability of the net/tls/tlssw.c component in the Linux operating system is related to improper memory release before deleting the last reference. Exploiting this vulnerability can allow an attacker to cause a service failure remotely...