CVE-2024-11738
Published Dec 6, 2024A flaw was found in Rustls 0.23.13 and related APIs. This vulnerability allows denial of service (panic) via a fragmented TLS ClientHello message.
Vendor/product archive
2 CVEs tagged to rustls_project / rustls — 0 Critical, 1 High, 1 Medium, 0 Low, 0 Unrated.
A flaw was found in Rustls 0.23.13 and related APIs. This vulnerability allows denial of service (panic) via a fragmented TLS ClientHello message.
rustls-mio/examples/tlsserver.rs in the rustls crate before 0.16.0 for Rust allows attackers to cause a denial of service (loop of conn_event and ready) by arranging for a client…