Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

msrc логотип

CVE-2026-97031

Опубликовано: 11 окт. 2026
Источник: msrc
CVSS3: 7.5
EPSS Низкий

Описание

Reject malformed ECH outer extension references in crypto/tls

EPSS

Процентиль: 44%
0.00519
Низкий

7.5 High

CVSS3

Связанные уязвимости

CVSS3: 7.5
ubuntu
18 дней назад

Multiple ECH outer extension references are not permitted under RFC 9849; previously, a client could send a well-crafted packet that could trigger memory exhaustion in the server process by specifying multiple references. We now reject these as malformed and curb the memory amplification vector as a result.

CVSS3: 7.5
redhat
18 дней назад

Multiple ECH outer extension references are not permitted under RFC 9849; previously, a client could send a well-crafted packet that could trigger memory exhaustion in the server process by specifying multiple references. We now reject these as malformed and curb the memory amplification vector as a result.

CVSS3: 7.5
nvd
18 дней назад

Multiple ECH outer extension references are not permitted under RFC 9849; previously, a client could send a well-crafted packet that could trigger memory exhaustion in the server process by specifying multiple references. We now reject these as malformed and curb the memory amplification vector as a result.

CVSS3: 7.5
debian
18 дней назад

Multiple ECH outer extension references are not permitted under RFC 98 ...

CVSS3: 7.5
github
18 дней назад

Multiple ECH outer extension references are not permitted under RFC 9849; previously, a client could send a well-crafted packet that could trigger memory exhaustion in the server process by specifying multiple references. We now reject these as malformed and curb the memory amplification vector as a result.

EPSS

Процентиль: 44%
0.00519
Низкий

7.5 High

CVSS3

Уязвимость CVE-2026-97031