A flaw was found in the way NSS handled CCS (ChangeCipherSpec) messages in TLS 1.3. This flaw allows a remote attacker to send multiple CCS messages, causing a denial of service for servers compiled with the NSS library. The highest threat from this vulnerability is to system availability. This flaw affects NSS versions before 3.58.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25648
Reference (s):
- FEDORA:FEDORA-2020-a857113c7a
- URL: https://lists.fedoraproject.org/archives/list/[email protected]/message/ERA5SVJQXQMDGES7RIT4F4NQVLD35RXN/
- FEDORA:FEDORA-2020-bb91bf9b8e
- URL: https://lists.fedoraproject.org/archives/list/[email protected]/message/HRM53IQCPZT2US3M7JXTP6I6IBA5RGOD/
- FEDORA:FEDORA-2020-f29254bd5e