Количество 13
Количество 13
CVE-2026-56862
Handshake messages, such as KeyUpdate, are always considered as state-advancing, regardless of whether a handshake has been completed or not. As a result, a malicious client can keep sending KeyUpdate messages to force the server to keep performing key derivation operations indefinitely.
CVE-2026-56862
Handshake messages, such as KeyUpdate, are always considered as state-advancing, regardless of whether a handshake has been completed or not. As a result, a malicious client can keep sending KeyUpdate messages to force the server to keep performing key derivation operations indefinitely.
CVE-2026-56862
Handshake messages, such as KeyUpdate, are always considered as state-advancing, regardless of whether a handshake has been completed or not. As a result, a malicious client can keep sending KeyUpdate messages to force the server to keep performing key derivation operations indefinitely.
CVE-2026-56862
Limit handshake messages we are willing to accept post-handshake in crypto/tls
CVE-2026-56862
Handshake messages, such as KeyUpdate, are always considered as state- ...
GHSA-7qch-w8m5-g3h3
Handshake messages, such as KeyUpdate, are always considered as state-advancing, regardless of whether a handshake has been completed or not. As a result, a malicious client can keep sending KeyUpdate messages to force the server to keep performing key derivation operations indefinitely.
RLSA-2026:60305
Important: go-toolset:rhel8 security, bug fix, and enhancement update
openSUSE-SU-2026:21593-1
Security update for go1.26
openSUSE-SU-2026:21592-1
Security update for go1.25
SUSE-SU-2026:3800-1
Security update for go1.25-openssl
SUSE-SU-2026:3799-1
Security update for go1.26-openssl
SUSE-SU-2026:3641-1
Security update for go1.26
SUSE-SU-2026:3640-1
Security update for go1.25
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-56862 Handshake messages, such as KeyUpdate, are always considered as state-advancing, regardless of whether a handshake has been completed or not. As a result, a malicious client can keep sending KeyUpdate messages to force the server to keep performing key derivation operations indefinitely. | CVSS3: 7.5 | 0% Низкий | 23 дня назад |
 | CVE-2026-56862 Handshake messages, such as KeyUpdate, are always considered as state-advancing, regardless of whether a handshake has been completed or not. As a result, a malicious client can keep sending KeyUpdate messages to force the server to keep performing key derivation operations indefinitely. | CVSS3: 7.5 | 0% Низкий | 23 дня назад |
 | CVE-2026-56862 Handshake messages, such as KeyUpdate, are always considered as state-advancing, regardless of whether a handshake has been completed or not. As a result, a malicious client can keep sending KeyUpdate messages to force the server to keep performing key derivation operations indefinitely. | CVSS3: 7.5 | 0% Низкий | 23 дня назад |
 | CVE-2026-56862 Limit handshake messages we are willing to accept post-handshake in crypto/tls | 0% Низкий | 16 дней назад | |
| CVE-2026-56862 Handshake messages, such as KeyUpdate, are always considered as state- ... | CVSS3: 7.5 | 0% Низкий | 23 дня назад |
| GHSA-7qch-w8m5-g3h3 Handshake messages, such as KeyUpdate, are always considered as state-advancing, regardless of whether a handshake has been completed or not. As a result, a malicious client can keep sending KeyUpdate messages to force the server to keep performing key derivation operations indefinitely. | CVSS3: 7.5 | 0% Низкий | 23 дня назад |
 | RLSA-2026:60305 Important: go-toolset:rhel8 security, bug fix, and enhancement update | 10 дней назад | ||
 | openSUSE-SU-2026:21593-1 Security update for go1.26 | 17 дней назад | ||
| openSUSE-SU-2026:21592-1 Security update for go1.25 | 17 дней назад | ||
| SUSE-SU-2026:3800-1 Security update for go1.25-openssl | 11 дней назад | ||
| SUSE-SU-2026:3799-1 Security update for go1.26-openssl | 11 дней назад | ||
| SUSE-SU-2026:3641-1 Security update for go1.26 | 18 дней назад | ||
| SUSE-SU-2026:3640-1 Security update for go1.25 | 18 дней назад |
Уязвимостей на страницу