CVE-2023-53159

The openssl crate before 0.10.55 for Rust allows an out-of-bounds read via an empty string to X509VerifyParamRef::set_host.

Score

CVSS 3.1 4.5 Medium

Status

Analyzed - cve@mitre.org

Published

2025-07-28

Last modified

2025-07-28

Weaknesses

CWE-126

Affected products

• Openssl (Sfackler)

References

• https://crates.io/crates/openssl
• https://github.com/sfackler/rust-openssl/issues/1965
• https://rustsec.org/advisories/RUSTSEC-2023-0044.html