CVE-2023-53159

CVE-2023-53159 affects the rust-openssl crate (versions before 0.10.55 ), allowing an out-of-bounds read when an empty string is passed to X509VerifyParamRef::set_host. The underlying flaw is classified as CWE-126: Buffer Over-read . The NVD assigns a CVSS 3.1 score of 3.3 (LOW) with a local atta...

CVE-2023-53159

The openssl crate before 0.10.55 for Rust allows an out-of-bounds read via an empty string to X509VerifyParamRef::sethost...