Advisory Database
  • Advisories
  • Dependency Scanning
  1. cargo
  2. ›
  3. s2n-tls
  4. ›
  5. GHSA-rp9h-rf7g-hwgr

GHSA-rp9h-rf7g-hwgr: s2n-tls has undefined behavior at process exit

November 14, 2024

s2n-tls uses the Linux atexit function to register functions that clean up the global state when the process exits. In multi-threaded environments, the atexit handler may clean up state which is still in use by other threads. When this occurs, the exiting process may experience a segmentation fault or other undefined behavior.

Customers of AWS services do not need to take action. Applications using s2n-tls should upgrade to the most recent release of s2n-tls.

Impacted versions: < v1.5.9.

References

  • github.com/advisories/GHSA-rp9h-rf7g-hwgr
  • github.com/aws/s2n-tls
  • github.com/aws/s2n-tls/commit/493b77167dc367c394de23cfe78a029298e2a254
  • github.com/aws/s2n-tls/releases/tag/v1.5.9
  • github.com/aws/s2n-tls/security/advisories/GHSA-rp9h-rf7g-hwgr

Code Behaviors & Features

Detect and mitigate GHSA-rp9h-rf7g-hwgr with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →

Affected versions

All versions before 0.3.7

Fixed versions

  • 0.3.7

Solution

Upgrade to version 0.3.7 or above.

Source file

cargo/s2n-tls/GHSA-rp9h-rf7g-hwgr.yml

Spotted a mistake? Edit the file on GitLab.

  • Site Repo
  • About GitLab
  • Terms
  • Privacy Statement
  • Contact

Page generated Sun, 08 Nov 2026 00:16:25 +0000.