https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T16:01:01.925140+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2024-11738 CVE-2024-11738 — Rustls: rustls network-reachable panic in `acceptor::accept` 2026-10-04T16:01:01.926894+00:00

Affected: rustls, Red Hat Trusted Artifact Signer

A flaw was found in Rustls 0.23.13 and related APIs. This vulnerability allows denial of service (panic) via a fragmented TLS ClientHello message.

 https://cve.radiocsirt.org/vuln/ghsa-qg5g-gv98-5ffh GHSA-qg5g-gv98-5ffh — rustls network-reachable panic in `Acceptor::accept` 2026-10-04T16:01:01.926948+00:00

Affected: crates.io: rustls

A bug introduced in rustls 0.23.13 leads to a panic if the received TLS ClientHello is fragmented. Only servers that use `rustls::server::Acceptor::accept()` are affected.

Servers that use `tokio-rustls`'s `LazyConfigAcceptor` API are affected.

Servers that use `tokio-rustls`'s `TlsAcceptor` API are not affected.

Servers that use `rustls-ffi`'s `rustls_acceptor_accept` API are affected.