Lucene search

CVE-2024-11738 Rustls: rustls network-reachable panic in `acceptor::accept`

🗓️ 06 Dec 2024 14:11:54Reported by redhatType

Flaw in Rustls 0.23.13 allows denial of service via fragmented TLS ClientHello message.

Reporter	Title	Published	Views	Family All 7
UbuntuCve	CVE-2024-11738	6 Dec 202400:00	–	ubuntucve
CVE	CVE-2024-11738	6 Dec 202415:15	–	cve
RedhatCVE	CVE-2024-11738	27 Nov 202407:50	–	redhatcve
Debian CVE	CVE-2024-11738	6 Dec 202415:15	–	debiancve
OSV	UBUNTU-CVE-2024-11738	6 Dec 202415:15	–	osv
NVD	CVE-2024-11738	6 Dec 202415:15	–	nvd
Cvelist	CVE-2024-11738 Rustls: rustls network-reachable panic in `acceptor::accept`	6 Dec 202414:54	–	cvelist

Source	Link
github	www.github.com/rustls/rustls
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
github	www.github.com/advisories/GHSA-qg5g-gv98-5ffh
github	www.github.com/rustls/rustls/issues/2227
access	www.access.redhat.com/security/cve/CVE-2024-11738
rustsec	www.rustsec.org/advisories/RUSTSEC-2024-0399.html

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

06 Dec 2024 14:54Current

6.6Medium risk

Vulners AI Score6.6

CVSS35.3

EPSS0.001

SSVC

CWE-248