Threats tagged 'ghsa-x8gv-f6w5-h79g'

A vulnerability in Node.js TLS server occurs when SSL_set_SSL_CTX() is called to switch a SSL_CTX during a handshake and the new context has more provider signature algorithms than the original. This can cause out-of-bounds memory access leading to a denial of service. The issue affects only non-default configurations where SSL_CTX is switched mid-handshake with differing signature algorithms. FIPS modules are not impacted. The severity is low due to limited exploitation scope and the need for specific application behavior.