Approved changes feed: RSS · Atom
cpe:2.3:a:rustls_project:rustls:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Rustls Project (48e73bd1-3b0c-519b-9dad-36595556e357) |
|---|---|
| Product | Rustls (4ba788f9-ea30-5011-8908-de10312a92ca) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/rust-rustls |
purl2cpe | 2026-06-01 10:13:28.984885 |
pkg:deb/ubuntu/rust-rustls |
purl2cpe | 2026-06-01 10:13:28.984888 |
pkg:github/rustls/rustls |
purl2cpe | 2026-06-01 10:13:28.984891 |
pkg:rpm/fedora/rust-rustls |
purl2cpe | 2026-06-01 10:13:28.984894 |
pkg:rpm/opensuse/rust-rustls |
purl2cpe | 2026-06-01 10:13:28.984897 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-32650 |
under_investigation | 2026-06-08 06:37:23.504782 |
Rustls vulnerable to an infinite loop in rustls::conn::ConnectionCommon::complete_io() with proper client input
HIGH (7.5)
Rustls is a modern TLS library written in Rust. `rustls::ConnectionCommon::complete_io` could fall into an infinite loop based on network input. When using a blocking rustls server, if a client send a `close_notify` message immediately after `client_hello`, the server's `complete_io` will get in an infinite loop. This vulnerability is fixed in 0.23.5, 0.22.4, and 0.21.11.
Published: 2024-04-19T16:05:44.050Z
Updated: 2024-08-02T02:13:40.195Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-15541 |
vulnerable | 2026-06-08 05:12:57.566979 |
Details available
rustls-mio/examples/tlsserver.rs in the rustls crate before 0.16.0 for Rust allows attackers to cause a denial of service (loop of conn_event and ready) by arranging for a client to never be writable.
Published: 2019-08-26T11:49:39.000Z
Updated: 2024-08-05T00:49:13.730Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.