Threats tagged 'ghsa-jh53-vxwq-v4wp'

A key exchange downgrade vulnerability exists in rustls versions before 0.23.46. This flaw allows network attackers to poison the per-server-name key-exchange group record using an unauthenticated ServerHello message. By responding to one connection with a ServerHello selecting the X25519 group, attackers can cause subsequent ClientHello messages to use only classical key shares, thereby losing post-quantum confidentiality.