Executive brief
`openssl` `X509VerifyParamRef::set_host` buffer over-read
Affected products
- crates.io openssl
Junglewise Threat Intelligence
CVE-2023-53159: RUSTSEC-2023-0044 - `openssl` `X509VerifyParamRef::set_host` buffer over-read
CVE-2023-53159 · Severity: low · CVSS 3.1 · Published 2023-06-20
Technologies: openssl (crates.io). Vendors: crates.io.
Related threats
- rust-openssl heap overflow in CipherCtxRef::cipher_update_inplace
- rust-openssl heap buffer overflow in AES key-wrap-with-padding
- rust-openssl undefined behavior in X509Ref::ocsp_responders
- rust-openssl buffer over-read in PSK and cookie callbacks
- rust-openssl stack buffer overflow in MdCtxRef::digest_final