OpenSSL -- Unbounded memory growth with session handling in TLSv1.3

2024-04-0800:00:00

vuxml.freebsd.org

openssl

memory growth

tlsv1.3

session handling

6.9 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

10.5%

JSON

The OpenSSL project reports:

Some non-default TLS server configurations can cause unbounded
memory growth when processing TLSv1.3 sessions

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchopenssl< 3.0.13_3,1UNKNOWN
FreeBSDanynoarchopenssl31< 3.1.5_3UNKNOWN
FreeBSDanynoarchopenssl32< 3.2.1_2UNKNOWN
FreeBSDanynoarchopenssl-quictls< 3.0.13_3UNKNOWN
FreeBSDanynoarchopenssl31-quictls< 3.1.5_1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
FreeBSD	any	noarch	openssl	< 3.0.13_3,1	UNKNOWN
FreeBSD	any	noarch	openssl31	< 3.1.5_3	UNKNOWN
FreeBSD	any	noarch	openssl32	< 3.2.1_2	UNKNOWN
FreeBSD	any	noarch	openssl-quictls	< 3.0.13_3	UNKNOWN
FreeBSD	any	noarch	openssl31-quictls	< 3.1.5_1	UNKNOWN