Medium severity5.3OSV Advisory· Published Dec 6, 2024· Updated Jun 17, 2026
CVE-2024-11738
CVE-2024-11738
Description
A flaw was found in Rustls 0.23.13 and related APIs. This vulnerability allows denial of service (panic) via a fragmented TLS ClientHello message.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
5- cpe:2.3:a:rustls_project:rustls:0.23.13:*:*:*:*:*:*:*
- osv-coords2 versionspkg:rpm/opensuse/himmelblau&distro=openSUSE%20Tumbleweedpkg:rpm/suse/himmelblau&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP7
< 0.7.7+git.0.b48d0bb-1.1+ 1 more
- (no CPE)range: < 0.7.7+git.0.b48d0bb-1.1
- (no CPE)range: < 2.3.9+git0.a9fd29b-150700.3.15.1
Patches
Vulnerability mechanics
References
5- github.com/rustls/rustls/issues/2227nvdExploitIssue TrackingVendor Advisory
- access.redhat.com/security/cve/CVE-2024-11738nvdVendor Advisory
- bugzilla.redhat.com/show_bug.cginvdVendor Advisory
- github.com/advisories/GHSA-qg5g-gv98-5ffhnvdThird Party Advisory
- rustsec.org/advisories/RUSTSEC-2024-0399.htmlnvdVendor Advisory
News mentions
0No linked articles in our index yet.