Skip to content
OpenAdvisories

Package · Debian

rust-rustls

6 known vulnerabilities.

1 result · Clear filters · Feed

  • High 7.5

    Rustls vulnerable to an infinite loop in rustls::conn::ConnectionCommon::complete_io() with proper client input

    Rustls is a modern TLS library written in Rust. `rustls::ConnectionCommon::complete_io` could fall into an infinite loop based on network input. When using a blocking rustls server, if a client send a `close_notify` message immediately after `client_hello`, t…