Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Resource exhaustion via memory leak in tokio-boring
Vulnerability Description
The tokio-boring library in version 4.0.0 is affected by a memory leak issue that can lead to excessive resource consumption and potential DoS by resource exhaustion. The set_ex_data function used by the library did not deallocate memory used by pre-existing data in memory each time after completing a TLS connection causing the program to consume more resources with each new connection.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Vulnerability Type
未加控制的资源消耗(资源穷尽)
Vulnerability Title
boring 安全漏洞
Vulnerability Description
boring是Cloudflare开源的一款 Rust 编程语言的 BoringSSL 绑定。 boring 4.0.0 版本存在安全漏洞，该漏洞源于内存泄漏导致资源耗尽，每次完成 TLS 连接后，set_ex_data库使用的函数不会释放内存，导致程序在每个新连接中消耗更多资源。
CVSS Information
N/A
Vulnerability Type
N/A