CVE-2019-15541: High severity rustls vulnerability
Published Aug 26, 2019
·Updated
rustls-mio/examples/tlsserver.rs in the rustls crate before 0.16.0 for Rust allows attackers to cause a denial of service (loop of connevent and ready) by arranging for a client to never be writable.
Affected Software
1 affected component
Rustls Project Rustls<0.16.0
Remediation
Event History
Aug 26, 2019
CVE Published
via MITRE·11:49 AM
Data Sourced
via MITRE·11:49 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2019-15541?
CVE-2019-15541 has a severity rating of medium due to its potential for creating a denial of service condition.
2
How do I fix CVE-2019-15541?
To fix CVE-2019-15541, update the rustls crate to version 0.16.0 or later.
3
What type of attack does CVE-2019-15541 enable?
CVE-2019-15541 enables attackers to launch a denial of service attack by manipulating the client's writable state.
4
What software is affected by CVE-2019-15541?
CVE-2019-15541 affects the rustls crate versions prior to 0.16.0.
5
What is the main vulnerability described in CVE-2019-15541?
The main vulnerability in CVE-2019-15541 allows for a denial of service due to an infinite loop of event handling.