Описание
A flaw was found in Keycloak. This vulnerability allows an unauthenticated remote attacker to cause a denial of service (DoS) by repeatedly initiating TLS 1.2 client-initiated renegotiation requests to exhaust server CPU resources, making the service unavailable.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| keycloak | itp | package |
EPSS
Процентиль: 41%
0.00187
Низкий
Связанные уязвимости
CVSS3: 7.5
nvd
около 2 месяцев назад
A flaw was found in Keycloak. This vulnerability allows an unauthenticated remote attacker to cause a denial of service (DoS) by repeatedly initiating TLS 1.2 client-initiated renegotiation requests to exhaust server CPU resources, making the service unavailable.
CVSS3: 7.5
github
3 месяца назад
Keycloak TLS Client-Initiated Renegotiation Denial of Service
EPSS
Процентиль: 41%
0.00187
Низкий