Описание
The openssl crate before 0.10.55 for Rust allows an out-of-bounds read via an empty string to X509VerifyParamRef::set_host.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| rust-openssl | fixed | 0.10.57-1 | package | |
| rust-openssl | no-dsa | bookworm | package | |
| rust-openssl | postponed | bullseye | package |
Примечания
https://rustsec.org/advisories/RUSTSEC-2023-0044.html
https://github.com/sfackler/rust-openssl/issues/1965
https://github.com/sfackler/rust-openssl/commit/155b3dc71700d2ff31651bbc99b991765a718c4e
EPSS
Связанные уязвимости
The openssl crate before 0.10.55 for Rust allows an out-of-bounds read via an empty string to X509VerifyParamRef::set_host.
The openssl crate before 0.10.55 for Rust allows an out-of-bounds read via an empty string to X509VerifyParamRef::set_host.
The openssl crate before 0.10.55 for Rust allows an out-of-bounds read via an empty string to X509VerifyParamRef::set_host.
The openssl crate before 0.10.55 for Rust allows an out-of-bounds read via an empty string to X509VerifyParamRef::set_host.
`openssl` `X509VerifyParamRef::set_host` buffer over-read
EPSS