https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 10 Oct 2026 12:03:52 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-7631 EUVD-2026-7631 https://cve.radiocsirt.org/vuln/euvd-2026-7631 https://cve.radiocsirt.org/vuln/fkie_cve-2023-6180 <p>The tokio-boring library in version 4.0.0 is affected by a memory leak issue that can lead to excessive resource consumption and potential DoS by resource exhaustion. The set_ex_data function used by the library did not deallocate memory used by pre-existing data in memory each time after completing a TLS connection causing the program to consume more resources with each new connection.</p> <p>The tokio-boring library in version 4.0.0 is affected by a memory leak issue that can lead to excessive resource consumption and potential DoS by resource exhaustion. The set_ex_data function used by the library did not deallocate memory used by pre-existing data in memory each time after completing a TLS connection causing the program to consume more resources with each new connection.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-6180 https://cve.radiocsirt.org/vuln/ghsa-pjrj-h4fg-6gm4 <p><strong>Affected:</strong> crates.io: tokio-boring</p> <p>### Impact The tokio-boring library in version 4.0.0 is affected by a memory leak issue that can lead to excessive resource consumption and potential DoS by resource exhaustion. The `set_ex_data` function used by the library did not deallocate memory used by pre-existing data in memory each time after completing a TLS connection causing the program to consume more resources with each new connection.</p> <p>### Patches The issue is fixed in version 4.1.0 of tokio-boring.</p> <p>### References [CVE-2023-6180 at cve.org](https://www.cve.org/CVERecord?id=CVE-2023-6180)</p> <p><strong>Affected:</strong> crates.io: tokio-boring</p> <p>### Impact The tokio-boring library in version 4.0.0 is affected by a memory leak issue that can lead to excessive resource consumption and potential DoS by resource exhaustion. The `set_ex_data` function used by the library did not deallocate memory used by pre-existing data in memory each time after completing a TLS connection causing the program to consume more resources with each new connection.</p> <p>### Patches The issue is fixed in version 4.1.0 of tokio-boring.</p> <p>### References [CVE-2023-6180 at cve.org](https://www.cve.org/CVERecord?id=CVE-2023-6180)</p> https://cve.radiocsirt.org/vuln/ghsa-pjrj-h4fg-6gm4 https://cve.radiocsirt.org/vuln/gsd-2023-6180 gsd-2023-6180 https://cve.radiocsirt.org/vuln/gsd-2023-6180