Home > Vulnerability Database > CVE-2023-53159

Mend.io Vulnerability Database

New vulnerability? Tell us about it!

CVE-2023-53159

Good to know:

Date: July 27, 2025

The openssl crate before 0.10.55 for Rust allows an out-of-bounds read via an empty string to X509VerifyParamRef::set_host.

Severity Score

4.5

Related Resources (8)

Url: https://rustsec.org/advisories/RUSTSEC-2023-0044.html

Url: https://security-tracker.debian.org/tracker/CVE-2023-53159

Url: https://github.com/sfackler/rust-openssl/issues/1965

Url: https://nvd.nist.gov/vuln/detail/CVE-2023-53159

Url: https://crates.io/crates/openssl

Url: https://github.com/sfackler/rust-openssl

Url: https://github.com/sfackler/rust-openssl/pull/1968

Url: https://www.mend.io/vulnerability-database/CVE-2023-53159

Severity Score

4.5

Weakness Type (CWE)

Buffer Over-read

CWE-126

Top Fix

Upgrade Version

Upgrade to version openssl - 0.10.55;https://github.com/sfackler/rust-openssl.git - openssl-v0.10.55

CVSS v3.1

Base Score:	4.5
Attack Vector (AV):	LOCAL
Attack Complexity (AC):	HIGH
Privileges Required (PR):	NONE
User Interaction (UI):	NONE
Scope (S):	CHANGED
Confidentiality (C):	LOW
Integrity (I):	NONE
Availability (A):	LOW

Do you need more information?

Contact Us