CVE-2023-46135

Summary

rs-stellar-strkey is a Rust lib for encode/decode of Stellar Strkeys. A panic vulnerability occurs when a specially crafted payload is used.inner_payload_len should not above 64. This vulnerability has been patched in version 0.0.8.

Affected Software

Weaknesses

• CWE-248: CWE-248: Uncaught Exception

ADP Enrichment

CVE Program Container

Additional References

• https://github.com/stellar/rs-stellar-strkey/security/advisories/GHSA-5873-6fwq-463f
• https://github.com/stellar/rs-stellar-strkey/issues/58

CISA ADP Vulnrichment

• SSVC:
• Exploitation: poc
  • Automatable: yes
  • Technical Impact: partial

References

• https://github.com/stellar/rs-stellar-strkey/security/advisories/GHSA-5873-6fwq-463f
• https://github.com/stellar/rs-stellar-strkey/issues/58

• ←Previous
• Next→