GHSA-xcf7-rvmh-g6q4
Suggest an improvement- Source
- https://github.com/advisories/GHSA-xcf7-rvmh-g6q4
- Import Source
- https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2023/06/GHSA-xcf7-rvmh-g6q4/GHSA-xcf7-rvmh-g6q4.json
- JSON Data
- https://api.osv.dev/v1/vulns/GHSA-xcf7-rvmh-g6q4
- Aliases
- Published
- 2023-06-21T22:07:52Z
- Modified
- 2023-11-08T04:24:19.024498Z
- Summary
- `openssl` `X509VerifyParamRef::set_host` buffer over-read
- Details
-
When this function was passed an empty string,
opensslwould attempt to callstrlenon it, reading arbitrary memory until it reached a NUL byte. - References
Affected packages
crates.io / openssl
Package
- Name
- openssl
- View open source insights on deps.dev
- Purl
- pkg:cargo/openssl