CVE-2023-53157

Summary

The rosenpass crate before 0.2.1 for Rust allows remote attackers to cause a denial of service (panic) via a one-byte UDP packet.

Affected Software

Weaknesses

• CWE-130: CWE-130 Improper Handling of Length Parameter Inconsistency

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: yes
  • Technical Impact: partial

References

• https://github.com/rosenpass/rosenpass/commit/93439858d1c44294a7b377f775c4fc897a370bb2
• https://github.com/advisories/GHSA-6ggr-cwv4-g7qg
• https://rustsec.org/advisories/RUSTSEC-2023-0077.html
• https://crates.io/crates/rosenpass

• ←Previous
• Next→