CVE-2023-53159

CVE-2023-53159

CVSS 4.5 MEDIUMEPSS 0.3%CWE-126

The openssl crate before 0.10.55 for Rust allows an out-of-bounds read via an empty string to X509VerifyParamRef::set_host.

CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:L

Produtos afetados

sfackler · openssl

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

https://crates.io/crates/openssl https://github.com/sfackler/rust-openssl/issues/1965 https://rustsec.org/advisories/RUSTSEC-2023-0044.html