Tag

cve-2023-34462

Safeguard articles tagged "cve-2023-34462" — guides, analysis, and best practices for software supply chain and application security.

1 article

Security

CVE-2023-34462: The Netty SniHandler Memory Exhaustion Flaw

CVE-2023-34462 lets a crafted TLS ClientHello force Netty's SniHandler to allocate up to 16MB per connection, opening a denial-of-service path. Here is the root cause, affected versions, and the fix.

Jun 11, 20255 min read