CVE-2025-11419
Keycloak: keycloak tls client-initiated renegotiation denial of service
Summary
Keycloak: keycloak tls client-initiated renegotiation denial of service
Original description
The description as published by the source.
A flaw was found in Keycloak. This vulnerability allows an unauthenticated remote attacker to cause a denial of service (DoS) by repeatedly initiating TLS 1.2 client-initiated renegotiation requests to exhaust server CPU resources, making the service unavailable.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
References
- advisory access.redhat.com
- advisory access.redhat.com
- advisory access.redhat.com
- advisory access.redhat.com
- advisory access.redhat.com
- advisory github.com
- advisory nvd.nist.gov
- report bugzilla.redhat.com
- report github.com
- web access.redhat.com
- web catalog.redhat.com
- web github.com
- web github.com