Most recent entries from all https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 27 Oct 2026 16:41:59 +0000 CVE-2026-116540 — netty-tcnative 2.0.66.Final before 2.0.84.Final Use-After-Free in Session Ticket Callback https://db.gcve.eu/vuln/cve-2026-116540 <p><strong>Affected:</strong> netty-tcnative</p> <p>netty-tcnative 2.0.66.Final before 2.0.84.Final built against OpenSSL 3.x contains a use-after-free vulnerability in ssl_tlsext_ticket_key_cb during session ticket key rotation. Remote clients performing TLS handshakes while setSessionTicketKeys0 frees the shared key array cause OpenSSL to read freed HMAC keys, crashing or corrupting ticket processing.</p> <p><strong>Affected:</strong> netty-tcnative</p> <p>netty-tcnative 2.0.66.Final before 2.0.84.Final built against OpenSSL 3.x contains a use-after-free vulnerability in ssl_tlsext_ticket_key_cb during session ticket key rotation. Remote clients performing TLS handshakes while setSessionTicketKeys0 frees the shared key array cause OpenSSL to read freed HMAC keys, crashing or corrupting ticket processing.</p> https://db.gcve.eu/vuln/cve-2026-116540