RUSTSEC-2026-0348: Brotli certificate decompression can allocate up to 1 GiB before authentication
还没有人认领这个 Issue。
评估
调研方向
Read the rustls advisory and the linked fix in rustls pull request #3297 to understand the reported Brotli certificate decompression issue. Check how numtracker uses rustls and whether its configuration enables the brotli feature; done means confirming whether this advisory applies to the service and recording the evidence.
由索引模型根据 Issue 内容生成。
描述
Brotli certificate decompression can allocate up to 1 GiB before authentication
| Details | |
|---|---|
| Package | rustls |
| Version | 0.23.43 |
| URL | https://github.com/rustls/rustls/pull/3297 |
| Date | 2026-10-14 |
| Patched versions | >=0.23.46 |
| Unaffected versions | <0.23.9 |
The built-in Brotli certificate decompressor (enabled by the non-default
brotli crate feature) bounded the size of the decompressed output, but
accepted a peer-selected history window. Brotli's large-window extension was
enabled, so a five-byte header could cause an allocation of 1 GiB. A peer can
abort a process whose allocator cannot satisfy that request.
No trusted certificate is required by the attacker. Affected configurations are:
- clients that enable the
brotlifeature and connect to a malicious server, and - servers that enable the
brotlifeature and request client certificates.
Applications that do not enable the brotli feature are not affected.
See advisory page for additional details.
- 主要语言
- Rust
- 星标
- 2
- 派生
- 2
- 平均合并
- 2 天 21 小时
- 30 天内合并 PR
- 6
环境准备
- 提供 Dockerfile 或 Docker Compose 文件
- 没有 Pull Request 模板
- 没有贡献指南
从这里开始
- 先读完整个 Issue，再读项目的贡献指南。
- 在 Issue 下留言说明你要接手 —— 这能避免两个人做同样的事。
- Fork 仓库，在一个分支上完成修改。
- 提交 Pull Request，并在描述里引用这个 Issue 编号。
DiamondLightSource/numtracker 的其他 Issue
-
难度 1/5 1 小时以内 新手友好度 70/100
DiamondLightSource/numtracker#309 ·
-
难度 1/5 1 小时以内 新手友好度 82/100
DiamondLightSource/numtracker#278 ·
-
难度 2/5 1-3 小时 新手友好度 55/100
DiamondLightSource/numtracker#321 ·
-
难度 1/5 1 小时以内 新手友好度 25/100
DiamondLightSource/numtracker#320 ·
-
难度 4/5 3-5 天 新手友好度 35/100
DiamondLightSource/numtracker#318 ·
查看 DiamondLightSource/numtracker 的全部 Issue
相似的 Issue
-
area/backends bug session-analysis
难度 2/5 1-3 小时 新手友好度 69/100
维护者通常 1 天内回复
-
docs good first issue
难度 2/5 1-3 小时 新手友好度 75/100
-
crash
难度 2/5 1-3 小时 新手友好度 65/100
维护者通常 2 天内回复
-
难度 1/5 1 小时以内 新手友好度 65/100
aaif-goose/goose#13125 ·
维护者通常 1 天内回复
-
难度 2/5 1-3 小时 新手友好度 74/100
维护者通常 1 天内回复