Поиск уязвимостей
Количество 7
Количество 7
CVE-2024-5814
A malicious TLS1.2 server can force a TLS1.3 client with downgrade capability to use a ciphersuite that it did not agree to and achieve a successful connection. This is because, aside from the extensions, the client was skipping fully parsing the server hello. https://doi.org/10.46586/tches.v2024.i1.457-500
CVE-2024-5814
A malicious TLS1.2 server can force a TLS1.3 client with downgrade capability to use a ciphersuite that it did not agree to and achieve a successful connection. This is because, aside from the extensions, the client was skipping fully parsing the server hello. https://doi.org/10.46586/tches.v2024.i1.457-500
CVE-2024-5814
CVE-2024-5814
A malicious TLS1.2 server can force a TLS1.3 client with downgrade cap ...
GHSA-8cr7-x5g8-m3f3
A malicious TLS1.2 server can force a TLS1.3 client with downgrade capability to use a ciphersuite that it did not agree to and achieve a successful connection. This is because, aside from the extensions, the client was skipping fully parsing the server hello. https://doi.org/10.46586/tches.v2024.i1.457-500
BDU:2024-07277
Уязвимость реализации протокола TLS библиотеки SSL/TLS WolfSSL, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации
ALT-PU-2024-12644
ALT-PU-2024-12644: package `netatalk` update to version 3.2.8-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2024-5814 A malicious TLS1.2 server can force a TLS1.3 client with downgrade capability to use a ciphersuite that it did not agree to and achieve a successful connection. This is because, aside from the extensions, the client was skipping fully parsing the server hello. https://doi.org/10.46586/tches.v2024.i1.457-500 | CVSS3: 5.3 | 0% Низкий | около 2 лет назад |
 | CVE-2024-5814 A malicious TLS1.2 server can force a TLS1.3 client with downgrade capability to use a ciphersuite that it did not agree to and achieve a successful connection. This is because, aside from the extensions, the client was skipping fully parsing the server hello. https://doi.org/10.46586/tches.v2024.i1.457-500 | CVSS3: 5.3 | 0% Низкий | около 2 лет назад |
 | 0% Низкий | почти 2 года назад | ||
| CVE-2024-5814 A malicious TLS1.2 server can force a TLS1.3 client with downgrade cap ... | CVSS3: 5.3 | 0% Низкий | около 2 лет назад |
| GHSA-8cr7-x5g8-m3f3 A malicious TLS1.2 server can force a TLS1.3 client with downgrade capability to use a ciphersuite that it did not agree to and achieve a successful connection. This is because, aside from the extensions, the client was skipping fully parsing the server hello. https://doi.org/10.46586/tches.v2024.i1.457-500 | CVSS3: 5.3 | 0% Низкий | около 2 лет назад |
 | BDU:2024-07277 Уязвимость реализации протокола TLS библиотеки SSL/TLS WolfSSL, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации | CVSS3: 5.3 | 0% Низкий | больше 2 лет назад |
| ALT-PU-2024-12644 ALT-PU-2024-12644: package `netatalk` update to version 3.2.8-alt1 | CVSS3: 7.5 | около 2 лет назад |
Уязвимостей на страницу