CVE-2023-53159

openssl · Vulnerability

CVSS 3.1 4.5 MEDIUMEUVD CVSS 3.1 4.5 CVSS 3.1 · [email protected] · Secondary 4.5 MEDIUMCVSS 3.1 · [email protected] · Primary 3.3 LOWCVSS_V3 Publisher rating MODERATEFixed by openssl 0.10.55osv · severity unknownFixed by openssl 0.10.55KEV status unknown

Original advisory

cve-program · CVE-2023-53159

Published

The openssl crate before 0.10.55 for Rust allows an out-of-bounds read via an empty string to X509VerifyParamRef::set_host.

Read the publisher's advisory

euvd · EUVD-2023-59771

Published

The openssl crate before 0.10.55 for Rust allows an out-of-bounds read via an empty string to X509VerifyParamRef::set_host.

Read the publisher's advisory

nvd · CVE-2023-53159

Published

The openssl crate before 0.10.55 for Rust allows an out-of-bounds read via an empty string to X509VerifyParamRef::set_host.

Read the publisher's advisory

osv · GHSA-xcf7-rvmh-g6q4

Published

When this function was passed an empty string, `openssl` would attempt to call `strlen` on it, reading arbitrary memory until it reached a NUL byte.

Read the publisher's advisory

osv · RUSTSEC-2023-0044

Published

When this function was passed an empty string, `openssl` would attempt to call `strlen` on it, reading arbitrary memory until it reached a NUL byte.

Read the publisher's advisory

Affected versions, risk and source history

Related advisories and sources

Publishers link these advisories through the identifiers shown below. A shared identifier or date alone does not tell you whether your software is affected or whether the advisories describe the same cause.

CVE-2023-53159 · CVE overview and exploitation status

EUVD-2023-59771

GHSA-xcf7-rvmh-g6q4

RUSTSEC-2023-0044

cve-program · CVE-2023-53159

euvd · EUVD-2023-59771

nvd · CVE-2023-53159

osv · GHSA-xcf7-rvmh-g6q4

osv · RUSTSEC-2023-0044

Related changes

Linked by CVE identifier

No related changes are available here.