Debian/rust-rustls: high 7.5
Rustls is a modern TLS library written in Rust. `rustls::ConnectionCommon::complete_io` could fall into an infinite loop based on network input. When using a blocking rustls server, if a client send a
Action: Upgrade rust-rustls to 0.21.12-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.21.12-1 | - |
Fixed versions
| 0.21.12-1 |
Sources
- osv: DEBIAN-CVE-2024-32650#Debian:13/rust-rustls
- https://security-tracker.debian.org/tracker/CVE-2024-32650
published · modified · JSON