description: A flaw was found in the way NSS handled CCS (ChangeCipherSpec) messages in TLS 1.3. This flaw allows a remote attacker to send multiple CCS messages, causing a denial of service for servers compiled with the NSS library. The highest threat from this vulnerability is to system availability. This flaw affects NSS versions before 3.58.
problem types: CWE-770
affected:
{
vendor: n/a
product: nss
versions:
version: nss versions before 3.58, status: affected
}