The host is installed with 1.1.1 before 1.1.1y, 3.0.0 before 3.0.14, 3.1.0 before 3.1.6 or 3.2.0 before 3.2.2 and is prone to a denial of service vulnerability. A flaw is present in the application, which fails to properly handle TLSv1.3 sessions. Successful exploitation allows an attacker to exploit certain server configurations to trigger unbounded memory growth that would lead to a denial of service.