CVE-2025-11419
Keycloak: keycloak tls client-initiated renegotiation denial of service
Résumé
Keycloak: keycloak tls client-initiated renegotiation denial of service
Description d'origine
La description telle que publiée par la source (souvent en anglais).
A flaw was found in Keycloak. This vulnerability allows an unauthenticated remote attacker to cause a denial of service (DoS) by repeatedly initiating TLS 1.2 client-initiated renegotiation requests to exhaust server CPU resources, making the service unavailable.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory access.redhat.com
- advisory access.redhat.com
- advisory access.redhat.com
- advisory access.redhat.com
- advisory access.redhat.com
- advisory github.com
- advisory nvd.nist.gov
- report bugzilla.redhat.com
- report github.com
- web access.redhat.com
- web catalog.redhat.com
- web github.com
- web github.com