Rustls Project vulnerabilities
2 vulnerabilities
Known vulnerabilities in Rustls Project products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 1 product.
Products
1- Rustls2 vulnerabilities
CVE-2024-11738Crates.Iorustls+3
EPSS score0.73%
A flaw was found in Rustls 0.23.13 and related APIs. This vulnerability allows denial of service (panic) via a fragmented TLS ClientHello message.CVE-2019-15541rustls_projectrustlsEPSS score2.23%
rustls-mio/examples/tlsserver.rs in the rustls crate before 0.16.0 for Rust allows attackers to cause a denial of service (loop of conn_event and ready) by arranging for a client to never be writable.