Code injection

2023-10-2518:17:00

PRIOn knowledge base

www.prio-n.com

code injection

rust

stellar strkeys

vulnerability

patched

0.0005 Low

EPSS

Percentile

17.0%

JSON

rs-stellar-strkey is a Rust lib for encode/decode of Stellar Strkeys. A panic vulnerability occurs when a specially crafted payload is used.inner_payload_len should not above 64. This vulnerability has been patched in version 0.0.8.

CPENameOperatorVersion
rs-stellar-strkeylt0.0.8

CPE	Name	Operator	Version
	rs-stellar-strkey	lt	0.0.8

References

github.com/stellar/rs-stellar-strkey/issues/58

github.com/stellar/rs-stellar-strkey/security/advisories/GHSA-5873-6fwq-463f

0.0005 Low

EPSS

Percentile

17.0%

JSON

Related for PRION:CVE-2023-46135