CVE-2019-15541

    Dashboard / Vulnerabilities / CVE-2019-15541

    CVE-2019-15541

    Published: 26 Aug 2019Last Modified: 8 Jul 2026

    Summary:

    Details: rustls-mio/examples/tlsserver.rs in the rustls crate before 0.16.0 for Rust allows attackers to cause a denial of service (loop of conn_event and ready) by arranging for a client to never be writable.

    References: https://github.com/ctz/rustls/compare/cd66549...17ee52c, https://github.com/ctz/rustls/issues/285, https://github.com/ctz/rustls/commit/a93ee1abd2ab19ebe4bf9d684d56637ee54a6074

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- 0
    Fixed -17ee52c5d10394fdd7eede80c43b3e14a0aa1975

    Affected versions

    v/0.15.2
    v/0.15.1
    v/0.15.0

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2019-15541 | CVE-DB