GHSA-jrg3-gfjw-hm96HighCVSS 7.5

If one side of the TLS connection sends multiple key update messages post-handshake in a single...

Published
April 8, 2026
Last Modified
August 14, 2026

🔗 CVE IDs covered (1)

CVE-2026-32283 →

📋 Description

If one side of the TLS connection sends multiple key update messages post-handshake in a single record, the connection can deadlock, causing uncontrolled consumption of resources. This can lead to a denial of service. This only affects TLS 1.3.

🔗 References (122)