https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 16:00:59 +0000 https://cve.radiocsirt.org/vuln/cve-2024-11738 <p><strong>Affected:</strong> rustls, Red Hat Trusted Artifact Signer</p> <p>A flaw was found in Rustls 0.23.13 and related APIs. This vulnerability allows denial of service (panic) via a fragmented TLS ClientHello message.</p> <p><strong>Affected:</strong> rustls, Red Hat Trusted Artifact Signer</p> <p>A flaw was found in Rustls 0.23.13 and related APIs. This vulnerability allows denial of service (panic) via a fragmented TLS ClientHello message.</p> https://cve.radiocsirt.org/vuln/cve-2024-11738 https://cve.radiocsirt.org/vuln/ghsa-qg5g-gv98-5ffh <p><strong>Affected:</strong> crates.io: rustls</p> <p>A bug introduced in rustls 0.23.13 leads to a panic if the received TLS ClientHello is fragmented. Only servers that use `rustls::server::Acceptor::accept()` are affected.</p> <p>Servers that use `tokio-rustls`&#39;s `LazyConfigAcceptor` API are affected.</p> <p>Servers that use `tokio-rustls`&#39;s `TlsAcceptor` API are not affected.</p> <p>Servers that use `rustls-ffi`&#39;s `rustls_acceptor_accept` API are affected.</p> <p><strong>Affected:</strong> crates.io: rustls</p> <p>A bug introduced in rustls 0.23.13 leads to a panic if the received TLS ClientHello is fragmented. Only servers that use `rustls::server::Acceptor::accept()` are affected.</p> <p>Servers that use `tokio-rustls`&#39;s `LazyConfigAcceptor` API are affected.</p> <p>Servers that use `tokio-rustls`&#39;s `TlsAcceptor` API are not affected.</p> <p>Servers that use `rustls-ffi`&#39;s `rustls_acceptor_accept` API are affected.</p> https://cve.radiocsirt.org/vuln/ghsa-qg5g-gv98-5ffh