Skip to content
OpenAdvisories

Product · AWS

s2n-tls

1 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 6.5

    Silent Drop of TLS 1.3 Encrypted Records in s2n-tls

    Missing validation of the outer content_type byte on TLS 1.3 encrypted records in s2n-tls allows an active man-in-the-middle to silently discard individual application data records without either endpoint detecting the modification. RFC 8446 Section 5.2 requi…