Denial of Service Vulnerability in rustls Crate by Rust

CVE-2019-15541

What is CVE-2019-15541?

The rustls crate prior to version 0.16.0 for Rust contains a vulnerability that can lead to a denial of service. By leveraging the way connections are handled, an attacker can trigger a situation where a client remains in a non-writable state. This results in a loop of connection events, hindering normal operation and effectively rendering the service inaccessible.

References