Threats tagged 'ghsa-rrw2-px9j-qffj'

A vulnerability in the fs2-io library on the JVM can cause a CPU spin loop during the TLS handshake if one side of a connection half-shuts down the socket write while the peer awaits more data. This results in high CPU usage until the connection is closed, enabling a denial of service attack by exhausting server resources. The issue affects fs2-io versions prior to 3.12.2 and 3.13.0-M7, as well as versions before 2.5.13. No workarounds exist, but patches are available in fixed versions.