| Titolo | Denial-of-Service vulnerability in axTLS library |
|---|
| Descrizione | Attackers are able to allocate significant amount of memory and processor time. So the availability of a service may be disturbed. This kind of attack is called denial of service (DoS). Therefore, this vulnerability is security-critical, if any security relevant process depends on remote availability.
CVE-2019-9689
Affected versions: axTLS <= 2.1.5
Deutsche Telekom CERT |
|---|
| Fonte | ⚠️ https://www.telekom.com/resource/blob/586428/51ae062269fbcb068bd20379f87f1398/dl-191121-critical-remote-denial-of-service-vulnerability-ii--data.pdf |
|---|
| Utente | misc (UID 3) |
|---|
| Sottomissione | 29/11/2019 09:58 (7 anni fa) |
|---|
| Moderazione | 08/12/2019 13:46 (9 days later) |
|---|
| Stato | Accettato |
|---|
| Voce VulDB | 146654 [Cameron Hamilton-Rich axTLS fino a 2.1.5 TLS Handshake tls1.c process_certificate TLS Certificate buffer overflow] |
|---|
| Punti | 20 |
|---|