JDK-8299870 : TLS record version check allows invalid records
  • Type: Bug
  • Component: security-libs
  • Sub-Component: javax.net.ssl
  • Priority: P4
  • Status: In Progress
  • Resolution: Unresolved
  • Submitted: 2023-01-10
  • Updated: 2023-01-10
Related Reports
Duplicate :  
JDK-8298873 - Update IllegalRecordVersion.java for changes to TLS implementation
Relates :  
JDK-8298873 - Update IllegalRecordVersion.java for changes to TLS implementation
Description
ProtocolVersion.isNegotiable() returns true for any value greater than or equal to 0x300.
Comments
A pull request was submitted for review. URL: https://git.openjdk.org/jdk/pull/11929 Date: 2023-01-10 18:59:30 +0000
10-01-2023