Vulnerability	Vulnerable Version
M Allocation of Resources Without Limits or Throttling io.vertx:vertx-core is a tool-kit for building reactive applications on the JVM. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling during the TLS handshake process, where the `SslContext` cache can be forced to grow indefinitely. The `SSLHelper`, `SslChannelProvider`, and `SslContextProvider` classes responsible for this caching in different versions all exhibit the same vulnerable behavior. A malicious client can disrupt service by sending a large number of distinct valid SNI names. This is particularly likely when the server has a broad hostname rule such as a wildcard. How to fix Allocation of Resources Without Limits or Throttling? Upgrade `io.vertx:vertx-core` to version 4.5.27, 5.0.12 or higher.	[4.3.4,4.5.27)[5.0.0.CR1,5.0.12)

Allocation of Resources Without Limits or Throttling

io.vertx:vertx-core is a tool-kit for building reactive applications on the JVM.

Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling during the TLS handshake process, where the SslContext cache can be forced to grow indefinitely. The SSLHelper, SslChannelProvider, and SslContextProvider classes responsible for this caching in different versions all exhibit the same vulnerable behavior. A malicious client can disrupt service by sending a large number of distinct valid SNI names. This is particularly likely when the server has a broad hostname rule such as a wildcard.

How to fix Allocation of Resources Without Limits or Throttling?

Upgrade io.vertx:vertx-core to version 4.5.27, 5.0.12 or higher.

[4.3.4,4.5.27)[5.0.0.CR1,5.0.12)

Go back to all versions of this package