VDB
GHSA-2mjx-qc3c-rqvc
GHSA-2mjx-qc3c-rqvc
PUBLISHED
CVSS 5.300000190734863 MEDIUM
Rustls (tested version 0.23.44, and it appears still an issue on latest master though I have not tested this) accepts a TLS 1.3 server flight where a plaintext EncryptedExtensions is packed into the same record as the ServerHello. This is very similar to Go's CVE-2025-61730 fixed in https://github.com/golang/go/commit/5046bdf8a612b35a2c1a9e168054c1d5c65e7dd7
Risk Scores
CVSS 3.1
5.300000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| chainguard | sdp-k8s-injector | 0 |
| chainguard | ztunnel-1.28 | 0 |
| wolfi | ntpd-rs | 0 |
| chainguard | shadowsocks-rust | 0 |
| wolfi | vector | 0 |
| wolfi | linkerd2-proxy | 0 |
| chainguard | zellij | 0 |
| crates.io | rustls | 0.23.13 |
| wolfi | qdrant | 0 |
| wolfi | wadm | 0 |
| wolfi | zellij | 0 |
| chainguard | tealdeer | 0 |
| wolfi | zola | 0 |
| chainguard | lychee | 0 |
| chainguard | vector | 0 |
| chainguard | ztunnel-1.31 | 0 |
| wolfi | deno | 0 |
| chainguard | sentry-cli | 0 |
| wolfi | sccache | 0 |
| chainguard | cargo-audit | 0 |
…and 28 more
Timeline
- CVE Published
References
- https://github.com/advisories/GHSA-2mjx-qc3c-rqvc advisory
- https://github.com/rustls/rustls/security/advisories/GHSA-2mjx-qc3c-rqvc url
- https://github.com/golang/go/commit/5046bdf8a612b35a2c1a9e168054c1d5c65e7dd7 patch
- https://github.com/rustls/rustls/commit/98456aea708a7e3c6151e00ca2d4428e7a58257a patch
- https://rustsec.org/advisories/RUSTSEC-2026-0285.html url
- https://github.com/rustls/rustls/pull/3265 patch
- https://github.com/rustls/rustls/releases/tag/v/0.23.45 url