Eric Rosenberg

**Name of the Vulnerable Software and Affected Versions** tokio-boring version 4.0.0 **Description** The issue is related to a memory leak that can cause excessive resource consumption and potentially lead to a Denial of Service (DoS) by resource exhaustion. This occurs because the `set ex data` function, used by the library, fails to deallocate memory used by pre-existing data after completing a TLS connection, resulting in increased resource consumption with each new connection. **Recommendations** For tokio-boring version 4.0.0, at the moment, there is no information about a newer version that contains a fix for this vulnerability.