CVE-2023-53159

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2023-53159
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-53159.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2023-53159
Aliases
Downstream
Related
Published
2025-07-28T00:00:00Z
Modified
2026-08-27T04:05:38.936066456Z
Severity
  • 4.5 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:L CVSS Calculator
Summary
[none]
Details

The openssl crate before 0.10.55 for Rust allows an out-of-bounds read via an empty string to X509VerifyParamRef::set_host.

Database specific 
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53159.json",
    "cwe_ids": [
        "CWE-126"
    ],
    "cna_assigner": "mitre"
}
References

Affected packages

Git / github.com/rust-openssl/rust-openssl

Affected ranges

Type
GIT
Repo
https://github.com/rust-openssl/rust-openssl
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
d7dae6fb45aca39ae9793be6365d92e870e0b8ee
Database specific
Show details 
{
    "cpe": "cpe:2.3:a:sfackler:openssl:*:*:*:*:*:rust:*:*",
    "source": [
        "AFFECTED_FIELD",
        "CPE_RANGE"
    ],
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "fixed": "0.10.55"
        }
    ]
}

Affected versions

openssl-errors-v0.*
openssl-errors-v0.1.0
openssl-errors-v0.2.0
openssl-macros-v0.*
openssl-macros-v0.1.0
openssl-macros-v0.1.1
openssl-sys-v0.*
openssl-sys-v0.9.24
openssl-sys-v0.9.25
openssl-sys-v0.9.26
openssl-sys-v0.9.27
openssl-sys-v0.9.28
openssl-sys-v0.9.30
openssl-sys-v0.9.31
openssl-sys-v0.9.32
openssl-sys-v0.9.33
openssl-sys-v0.9.35
openssl-sys-v0.9.36
openssl-sys-v0.9.37
openssl-sys-v0.9.38
openssl-sys-v0.9.39
openssl-sys-v0.9.40
openssl-sys-v0.9.41
openssl-sys-v0.9.42
openssl-sys-v0.9.43
openssl-sys-v0.9.44
openssl-sys-v0.9.45
openssl-sys-v0.9.46
openssl-sys-v0.9.47
openssl-sys-v0.9.48
openssl-sys-v0.9.49
openssl-sys-v0.9.50
openssl-sys-v0.9.51
openssl-sys-v0.9.52
openssl-sys-v0.9.53
openssl-sys-v0.9.54
openssl-sys-v0.9.55
openssl-sys-v0.9.56
openssl-sys-v0.9.57
openssl-sys-v0.9.58
openssl-sys-v0.9.59
openssl-sys-v0.9.60
openssl-sys-v0.9.61
openssl-sys-v0.9.62
openssl-sys-v0.9.63
openssl-sys-v0.9.64
openssl-sys-v0.9.65
openssl-sys-v0.9.66
openssl-sys-v0.9.67
openssl-sys-v0.9.68
openssl-sys-v0.9.69
openssl-sys-v0.9.70
openssl-sys-v0.9.71
openssl-sys-v0.9.72
openssl-sys-v0.9.73
openssl-sys-v0.9.74
openssl-sys-v0.9.75
openssl-sys-v0.9.76
openssl-sys-v0.9.77
openssl-sys-v0.9.78
openssl-sys-v0.9.79
openssl-sys-v0.9.80
openssl-sys-v0.9.81
openssl-sys-v0.9.82
openssl-sys-v0.9.83
openssl-sys-v0.9.84
openssl-sys-v0.9.85
openssl-sys-v0.9.86
openssl-sys-v0.9.87
openssl-sys-v0.9.88
openssl-v0.*
openssl-v0.10.0
openssl-v0.10.1
openssl-v0.10.10
openssl-v0.10.11
openssl-v0.10.12
openssl-v0.10.13
openssl-v0.10.14
openssl-v0.10.15
openssl-v0.10.16
openssl-v0.10.17
openssl-v0.10.18
openssl-v0.10.19
openssl-v0.10.2
openssl-v0.10.20
openssl-v0.10.21
openssl-v0.10.22
openssl-v0.10.23
openssl-v0.10.24
openssl-v0.10.25
openssl-v0.10.26
openssl-v0.10.27
openssl-v0.10.28
openssl-v0.10.29
openssl-v0.10.3
openssl-v0.10.30
openssl-v0.10.31
openssl-v0.10.32
openssl-v0.10.33
openssl-v0.10.34
openssl-v0.10.35
openssl-v0.10.36
openssl-v0.10.37
openssl-v0.10.38
openssl-v0.10.39
openssl-v0.10.4
openssl-v0.10.40
openssl-v0.10.41
openssl-v0.10.42
openssl-v0.10.43
openssl-v0.10.44
openssl-v0.10.45
openssl-v0.10.46
openssl-v0.10.47
openssl-v0.10.48
openssl-v0.10.49
openssl-v0.10.5
openssl-v0.10.50
openssl-v0.10.51
openssl-v0.10.52
openssl-v0.10.53
openssl-v0.10.54
openssl-v0.10.6
openssl-v0.10.7
openssl-v0.10.8
openssl-v0.10.9
openssl-v0.9.27
rust-0.*
rust-0.10
rust-0.11
rust-0.12
v0.*
v0.0.2
v0.1
v0.1.0
v0.1.1
v0.2.0
v0.2.1
v0.2.10
v0.2.11
v0.2.12
v0.2.13
v0.2.14
v0.2.15
v0.2.16
v0.2.17
v0.2.18
v0.2.2
v0.2.3
v0.2.4
v0.2.5
v0.2.6
v0.2.7
v0.2.8
v0.2.9
v0.3.0
v0.3.1
v0.3.2
v0.3.3
v0.3.4
v0.3.5
v0.3.6
v0.4.0
v0.4.1
v0.4.2
v0.4.3
v0.5.0
v0.5.2
v0.5.3
v0.5.4
v0.5.5
v0.6.0
v0.6.1
v0.6.2
v0.9.1
v0.9.10
v0.9.11
v0.9.12
v0.9.13
v0.9.14
v0.9.15
v0.9.16
v0.9.17
v0.9.18
v0.9.19
v0.9.2
v0.9.20
v0.9.21
v0.9.22
v0.9.23
v0.9.3
v0.9.4
v0.9.5
v0.9.6
v0.9.7
v0.9.8
v0.9.9

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-53159.json"