Threats tagged 'rustsec-2026-0285'

Rustls versions from 0.23.13 up to but not including 0.23.45 improperly accept TLS 1.3 handshake messages sent at incorrect encryption levels when they follow a key-changing message in the same record. This violates RFC 8446 section 5.1, which mandates terminating the connection with an "unexpected_message" alert in such cases. The flaw allows plaintext handshake messages to be accepted without rejection, though the handshake transcript remains authenticated, limiting the attacker's ability to alter or complete the handshake.