mirror of
https://github.com/Mbed-TLS/mbedtls.git
synced 2026-03-20 19:21:09 +01:00
a5c5c58107
Fix potential stack buffer overread when checking PSK binders. Signed-off-by: Ronald Cron <ronald.cron@arm.com>
5 lines
246 B
Plaintext
5 lines
246 B
Plaintext
Security
|
|
* Fix a stack buffer overread (less than 256 bytes) when parsing a TLS 1.3
|
|
ClientHello in a TLS 1.3 server supporting some PSK key exchange mode. A
|
|
malicious client could cause information disclosure or a denial of service.
|