CVE-2024-28854 vulnerabilities

Vulnerabilities for packages: sdp-k8s-injector...

CVE-2024-28854 vulnerabilities

Vulnerabilities for packages: sdp-k8s-injector...

aliyundrive-webdav (>=1.2.0, <=1.10.1), simple-hyper-server-tls (>=0.1.0, <=0.3.2) +1 more potentially affected by CVE-2024-28854 via tls-listener (>=0.3.0, <=0.5.1)

tls-listener CARGO version =0.3.0, =1.2.0, =0.1.0, =0.3.2 - yahf 0.0.2 Source cves: CVE-2024-28854 Source advisory: OSV:GHSA-2QPH-QPVM-2QF7...

CVE-2024-28854

tls-listener is a rust lang wrapper around a connection listener to support TLS. With the default configuration of tls-listener, a malicious user can open 6.4 TcpStreams a second, sending 0 bytes, and can trigger a DoS. The default configuration options make any public service using...

CVE-2024-28854 Slow loris vulnerability with default configuration in tls-listener

tls-listener is a rust lang wrapper around a connection listener to support TLS. With the default configuration of tls-listener, a malicious user can open 6.4 TcpStreams a second, sending 0 bytes, and can trigger a DoS. The default configuration options make any public service using...

CVE-2024-28854 Slow loris vulnerability with default configuration in tls-listener

tls-listener is a rust lang wrapper around a connection listener to support TLS. With the default configuration of tls-listener, a malicious user can open 6.4 TcpStreams a second, sending 0 bytes, and can trigger a DoS. The default configuration options make any public service using...

CVE-2024-28854

creationtimestamp| type| source ---|---|--- 2024-03-15 06:29:26+00:00| published-proof-of-concept| https://github.com/tmccombs/tls-listener/security/advisories/GHSA-2qph-qpvm-2qf7 2024-03-15 20:21:39+00:00| seen| https://t.me/ctinow/209091 2024-03-15 20:26:33+00:00| seen| https://t.me/ctinow/2090...