cve/2024/CVE-2024-28854.md

### [CVE-2024-28854](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-28854)
![](https://img.shields.io/static/v1?label=Product&message=tls-listener&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=%3D%20%3C%200.10.0%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-400%3A%20Uncontrolled%20Resource%20Consumption&color=brighgreen)

### Description

tls-listener is a rust lang wrapper around a connection listener to support TLS. With the default configuration of tls-listener, a malicious user can open 6.4 `TcpStream`s a second, sending 0 bytes, and can trigger a DoS. The default configuration options make any public service using `TlsListener::new()` vulnerable to a slow-loris DoS attack. This impacts any publicly accessible service using the default configuration of tls-listener in versions prior to 0.10.0. Users are advised to upgrade. Users unable to upgrade may mitigate this by passing a large value, such as `usize::MAX` as the parameter to `Builder::max_handshakes`.

### POC

#### Reference
- https://en.wikipedia.org/wiki/Slowloris_(computer_security)
- https://github.com/tmccombs/tls-listener/security/advisories/GHSA-2qph-qpvm-2qf7

#### Github
- https://github.com/NaInSec/CVE-LIST