Skip to content
OpenAdvisories
High · 7.5 CVE-2020-35875 EUVD-2021-1514GHSA-2jfv-g3fh-xq3vRUSTSEC-2020-0019

Excessive memory usage in tokio-rustls

Published Dec 31, 2020 · Updated Aug 4, 2024 · Assigned by mitre

Description

An issue was discovered in the tokio-rustls crate before 0.13.1 for Rust. Excessive memory usage may occur when data arrives quickly.

Affected packages

EcosystemPackageAffectedFixedRecord
crates.io tokio-rustls >= 0.12.0, < 0.12.3 0.12.3 GHSA-2jfv-g3fh-xq3v
crates.io tokio-rustls >= 0.13.0, < 0.13.1 0.13.1 GHSA-2jfv-g3fh-xq3v
crates.io tokio-rustls >= 0.12.0, < 0.12.3 · >= 0.13.0, < 0.13.1 0.12.3, 0.13.1 RUSTSEC-2020-0019

References