
Cloud Vulnerability DB
A community-led vulnerabilities database
RUSTSEC-2021-0052 is a vulnerability in the webpki crate that allows for CPU denial of service in certificate path building. The vulnerability was discovered in the certificate path validation process (Security Tracker).
The vulnerability affects the certificate path building functionality in webpki, where improper handling of certificate validation could lead to excessive CPU consumption. This creates a potential vector for denial of service attacks through certificate path validation (Security Tracker).
When exploited, this vulnerability can result in a CPU-based denial of service condition, potentially affecting systems that rely on webpki for certificate validation (Security Tracker).
The vulnerability can be triggered through the certificate path building process, making it exploitable in scenarios where an attacker can control or influence the certificate validation process (Security Tracker).
Source: This report was generated using AI
Free Vulnerability Assessment
Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.
Get a personalized demo
"Best User Experience I have ever seen, provides full visibility to cloud workloads."
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
"We know that if Wiz identifies something as critical, it actually is."