Out-of-Bounds Read Vulnerability in OpenSSL Crate for Rust by RustLang

CVE-2023-53159

What is CVE-2023-53159?

The OpenSSL crate prior to version 0.10.55 contains a vulnerability that enables an out-of-bounds read when an empty string is passed to the X509VerifyParamRef::set_host function. This flaw poses potential security risks by allowing unintended data access, highlighting the importance of updating to secure versions to mitigate possible exploitation.

References