A low-severity vulnerability in OpenSSL's TLS 1.3 certificate compression feature allows a peer-supplied length to grow a heap buffer before validation, potentially leading to memory exhaustion of up to 22 MiB per connection.
A low-severity vulnerability in OpenSSL's TLS 1.3 certificate compression feature allows a peer-supplied length to grow a heap buffer before validation, potentially leading to memory exhaustion of up to 22 MiB per connection.