Lucene search
+L

4 matches found

OSV
OSV
added 2024/12/06 3:15 p.m.14 views

AZL-61546 CVE-2024-11738 affecting package rust for versions less than 1.86.0-6

A flaw was found in Rustls 0.23.13 and related APIs. This vulnerability allows denial of service panic via a fragmented TLS ClientHello message...

5.3CVSS5.7AI score0.00707EPSS
SaveExploits1References1
Debian CVE
Debian CVE
added 2024/12/06 2:54 p.m.73 views

CVE-2024-11738

A flaw was found in Rustls 0.23.13 and related APIs. This vulnerability allows denial of service panic via a fragmented TLS ClientHello message...

7.5CVSS5.5AI score0.00707EPSS
SaveExploits1
RedhatCVE
RedhatCVE
added 2024/11/27 7:50 a.m.11 views

CVE-2024-11738

A flaw was found in Rustls 0.23.13 and related APIs. This vulnerability allows denial of service panic via a fragmented TLS ClientHello message...

5.3CVSS6.6AI score0.00707EPSS
SaveExploits1References7
OSV
OSV
added 2024/11/22 12:0 p.m.20 views

RUSTSEC-2024-0399 rustls network-reachable panic in `Acceptor::accept`

A bug introduced in rustls 0.23.13 leads to a panic if the received TLS ClientHello is fragmented. Only servers that use rustls::server::Acceptor::accept are affected. Servers that use tokio-rustls's LazyConfigAcceptor API are affected. Servers that use tokio-rustls's TlsAcceptor API are not...

7.5CVSS7AI score0.00707EPSS
SaveExploits1References3
Rows per page
Query Builder