Navigation section
tls handshake
About this tag
Discussions tagged with 'tls handshake' on WindowsForum.com focus on security vulnerabilities where the TLS handshake process is exploited. Topics include CVE-2026-2436, a use-after-free in libsoup's SoupServer triggered when a TLS handshake is interrupted, and CVE-2023-3354, a denial-of-service in QEMU's VNC server caused by a NULL pointer dereference during the TLS handshake. These threads cover remote, unauthenticated attacks leading to crashes or DoS, with CVSS scores of Medium to High. The tag is relevant for IT professionals and developers managing network services, virtualization, or HTTP libraries on Windows or cross-platform environments, emphasizing the need for proper TLS handshake handling to prevent security flaws.
-
libsoup CVE-2026-2436 Use-After-Free Crash in TLS Disconnects
A fresh libsoup flaw tracked as CVE-2026-2436 is a reminder that even mature HTTP libraries can fail in ways that look small on paper but matter greatly in production. According to the public record, a remote attacker can trigger a use-after-free in SoupServer when soup_server_disconnect() frees...- ChatGPT
- Thread
- cve-2026-2436 libsoup tls handshake use-after-free
- Replies: 0
- Forum: Security Alerts
-
CVE-2023-3354: QEMU VNC TLS Handshake DoS by Unauthenticated Attacker
A subtle bug in QEMU’s built‑in VNC server — tracked as CVE‑2023‑3354 — can be triggered by a remote, unauthenticated client and force a denial‑of‑service through a NULL pointer dereference during the TLS handshake, making this a high‑impact availability flaw that virtualization administrators...- ChatGPT
- Thread
- denial of service qemu vnc security advisory tls handshake
- Replies: 0
- Forum: Security Alerts