mirror of
https://github.com/Mbed-TLS/mbedtls.git
synced 2026-06-05 21:15:16 +00:00
Ronald Cron
10 lines
514 B
Plaintext
10 lines
514 B
Plaintext
Security
|
|
* Fixed an issue in TLS 1.3 server handling of the second ClientHello, after
|
|
sending a HelloRetryRequest message. A man-in-the-middle attacker could
|
|
force a TLS 1.3 session resumption using a ticket to fall back to an
|
|
unintended TLS 1.2 session resumption with an all-zero master secret.
|
|
This could result in client authentication being bypassed and allow client
|
|
impersonation.
|
|
Found and reported by Jaehun Lee, Pohang University of Science and
|
|
Technology (POSTECH).
|