Description
A TCP client can perform a TLS handshake and present the server name extension with a server name that is accepted by a server wildcard name, e.g. if the server is configured with a certificate accepting *.example.com, any XYZ.example.com where xyz is a valid name can be used.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Eclipse Foundation | Eclipse Vert.x | 4.3.4 – ≤ 4.5.26, 5.0.0 – ≤ 5.0.11 | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Wolfi
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Wolfi rolling | akhq | 0.28.0-r8 | — |
| Wolfi rolling | apache-pulsar-4.2 | 4.2.2-r0 | — |
| Wolfi rolling | apicurio-registry | 3.2.4-r0 | — |
| Wolfi rolling | druid | 37.0.0-r19 | — |
| Wolfi rolling | keycloak-26.5 +3 | No fix yet | — |
| Wolfi rolling | keycloak-26.6 +2 | 26.6.1-r5 | — |
| Wolfi rolling | spark-4.0-scala-2.13 | 4.0.2-r11 | — |
| Wolfi rolling | spark-4.1-scala-2.13 | 4.1.2-r3 | — |
| Wolfi rolling | strimzi-kafka-operator-kafka-init +5 | 1.1.0-r0 | — |
| Wolfi rolling | strimzi-kafka-operator-kafka-thirdparty-libs-cc | 1.1.0-r5 | — |
| Wolfi rolling | wildfly-openjdk-17 +1 | 40.0.0-r0 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Maven | io.vertx:vertx-core | >= 4.3.4, <= 4.3.8 | — | GHSA-3g76-f9xq-8vp6 |
| Maven | io.vertx:vertx-core | >= 4.4.0, <= 4.4.9 | — | GHSA-3g76-f9xq-8vp6 |
| Maven | io.vertx:vertx-core | >= 4.5.0, < 4.5.27 | 4.5.27 | GHSA-3g76-f9xq-8vp6 |
| Maven | io.vertx:vertx-core | >= 5.0.0, < 5.0.12 | 5.0.12 | GHSA-3g76-f9xq-8vp6 |