CVE-2023-39321 Processing an incomplete post-handshake message for a QUIC connection can cause a panic

Description

Processing an incomplete post-handshake message for a QUIC connection can cause a panic.

Produits et versions touchés

Produit	Versions touchées	Corrigé en
crypto/tls 1.21	1.21.0-0 → < 1.21.1	1.21.1

Autres CVE de crypto/tls

Les 13 CVE de crypto/tls →

CVE-2026-97031 Multiple ECH outer extension references are not permitted under RFC 9849; previously, a client could send a well-crafted… 7.5 Élevée CVE-2026-56862 Handshake messages, such as KeyUpdate, are always considered as state-advancing, regardless of whether a handshake has… 7.5 Élevée CVE-2026-42505 Handshakes which used Encrypted Client Hello could be de-anonymized by a passive network observer due to a disclosure of… 5.3 Moyenne CVE-2026-32283 If one side of the TLS connection sends multiple key update messages post-handshake in a single record, the connection… 7.5 Élevée