RUSTSEC-2023-0044: openssl X509VerifyParamRef::set_host buffer over-read #15
Description
| Details | |
|---|---|
| Package | openssl |
| Version | 0.10.44 |
| URL | rust-openssl/rust-openssl#1965 |
| Patched Versions | >=0.10.55 |
| Aliases | GHSA-xcf7-rvmh-g6q4 |
When this function was passed an empty string, openssl would attempt to call strlen on it, reading arbitrary memory until it reached a NUL byte.