Unrated severityOSV Advisory· Published Dec 6, 2024· Updated Nov 20, 2025
Rustls: rustls network-reachable panic in `acceptor::accept`
CVE-2024-11738
Description
A flaw was found in Rustls 0.23.13 and related APIs. This vulnerability allows denial of service (panic) via a fragmented TLS ClientHello message.
Affected products
1Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
5- access.redhat.com/security/cve/CVE-2024-11738mitrevdb-entryx_refsource_REDHAT
- bugzilla.redhat.com/show_bug.cgimitreissue-trackingx_refsource_REDHAT
- github.com/advisories/GHSA-qg5g-gv98-5ffhmitre
- github.com/rustls/rustls/issues/2227mitre
- rustsec.org/advisories/RUSTSEC-2024-0399.htmlmitre
News mentions
0No linked articles in our index yet.