Threats tagged 'ghsa-rp7q-jxfg-4g6g'

Rustls versions from 0.23.13 up to but not including 0.23.45 improperly accept TLS 1.3 handshake messages at incorrect encryption levels when these messages follow a key-changing message within the same record. This occurs because the Deframer::aligned function does not enforce the record-boundary alignment required by RFC 8446. An attacker, either a peer or someone on the communication path, can exploit this by packing a plaintext EncryptedExtensions message with the ServerHello, which rustls then accepts as unencrypted.