CVE-2024-11738

CVE-2024-11738 affects Rustls 0.23.13 and related APIs, enabling a denial-of-service (panic) via a fragmented TLS ClientHello message. Public documents (including IBM DataPower Bulletin and MSRC) confirm the vulnerability and provide remediation guidance. Impact is a panic causing service disrupt...

CVE-2019-15541

CVE-2019-15541 concerns rustls-mio/tlsserver.rs in the rustls crate prior to 0.16.0. The root cause is a denial-of-service condition caused by a loop between conn_event and ready when a client is never writable, enabling an attacker to stall connections. Affected component: rustls-mio (Rust). Imp...