Threats tagged 'ghsa-xwh2-f88c-v27r'

A vulnerability in glib-networking affects the client-side TLS 1.3 session cache, which does not limit the number of session tickets retained per host. A malicious server can exploit this by sending excessive session ticket messages, causing unbounded memory growth on the client and leading to a denial of service (DoS) due to memory exhaustion. No mitigation or patch currently meets Red Hat's criteria for deployment.