← All advisories

Unrated severityOSV Advisory· Published Dec 6, 2024· Updated Nov 20, 2025

Rustls: rustls network-reachable panic in `acceptor::accept`

CVE-2024-11738

Description

A flaw was found in Rustls 0.23.13 and related APIs. This vulnerability allows denial of service (panic) via a fragmented TLS ClientHello message.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4

Ctz/RustlsOSV
Range: rustls-post-quantum-v/0.1.0, v/0.1.0, v/0.1.1, …
Rustls/Rustlsllm-fuzzy
Range: =0.23.13
osv-coords2 versions
pkg:rpm/opensuse/himmelblau&distro=openSUSE%20Tumbleweed pkg:rpm/suse/himmelblau&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP7
< 0.7.7+git.0.b48d0bb-1.1+ 1 more
- (no CPE)range: < 0.7.7+git.0.b48d0bb-1.1
- (no CPE)range: < 2.3.9+git0.a9fd29b-150700.3.15.1

Patches

Vulnerability mechanics

References

5

access.redhat.com/security/cve/CVE-2024-11738mitrevdb-entryx_refsource_REDHAT
bugzilla.redhat.com/show_bug.cgimitreissue-trackingx_refsource_REDHAT
github.com/advisories/GHSA-qg5g-gv98-5ffhmitre
github.com/rustls/rustls/issues/2227mitre
rustsec.org/advisories/RUSTSEC-2024-0399.htmlmitre

News mentions

0

No linked articles in our index yet.