Lucene search
+L

288 matches found

RustSec
RustSec
•added 2020/05/19 12:00 p.m.•30 views

tokio-rustls reads may cause excessive memory usage

tokio-rustls does not call processnewpackets immediately after read, so the expected termination condition wantsread always returns true. As long as new incoming data arrives faster than it is processed and the reader does not return pending, data will be buffered. This may cause DoS...

7.5CVSS2.2AI score0.01352EPSS
SaveExploits0Affected Software1
OSV
OSV
•added 2020/05/19 12:00 p.m.•34 views

RUSTSEC-2020-0019 tokio-rustls reads may cause excessive memory usage

tokio-rustls does not call processnewpackets immediately after read, so the expected termination condition wantsread always returns true. As long as new incoming data arrives faster than it is processed and the reader does not return pending, data will be buffered. This may cause DoS...

7.5CVSS7.5AI score0.01352EPSS
SaveExploits0References3
OSV
OSV
•added 2019/08/26 12:15 p.m.•17 views

CVE-2019-15541

rustls-mio/examples/tlsserver.rs in the rustls crate before 0.16.0 for Rust allows attackers to cause a denial of service loop of connevent and ready by arranging for a client to never be writable...

7.5CVSS7AI score
SaveExploits0References3
NVD
NVD
•added 2019/08/26 12:15 p.m.•24 views

CVE-2019-15541

rustls-mio/examples/tlsserver.rs in the rustls crate before 0.16.0 for Rust allows attackers to cause a denial of service loop of connevent and ready by arranging for a client to never be writable...

7.5CVSS7.4AI score0.02233EPSS
SaveExploits1References3
Prion
Prion
•added 2019/08/26 12:15 p.m.•22 views

Design/Logic Flaw

rustls-mio/examples/tlsserver.rs in the rustls crate before 0.16.0 for Rust allows attackers to cause a denial of service loop of connevent and ready by arranging for a client to never be writable...

5CVSS7.3AI score0.02233EPSS
SaveExploits1References3Affected Software1
CVE
CVE
•added 2019/08/26 11:49 a.m.•55 views

CVE-2019-15541

CVE-2019-15541 concerns rustls-mio/tlsserver.rs in the rustls crate prior to 0.16.0. The root cause is a denial-of-service condition caused by a loop between conn_event and ready when a client is never writable, enabling an attacker to stall connections. Affected component: rustls-mio (Rust). Imp...

7.5CVSS7.3AI score0.02233EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
•added 2019/08/26 11:49 a.m.•29 views

CVE-2019-15541

rustls-mio/examples/tlsserver.rs in the rustls crate before 0.16.0 for Rust allows attackers to cause a denial of service loop of connevent and ready by arranging for a client to never be writable...

7.4AI score0.02233EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/08/26 12:00 a.m.•4 views

CVE-2019-15541: Improper Neutralization of Argument Delimiters in a Command

rustls-mio/examples/tlsserver.rs in the rustls crate before 0.16.0 for Rust allows attackers to cause a denial of service loop of connevent and ready by arranging for a client to never be writable...

7.5CVSS5.8AI score0.02233EPSS
SaveExploits1References2
Rows per page
Query Builder