GHSA-6ggr-cwv4-g7qgMediumCVSS 5.3
Remotely exploitable denial of service in Rosenpass
🔗 CVE IDs covered (1)
📋 Description
Affected versions of this crate did not validate the size of buffers when attempting to decode messages.
This allows an attacker to trigger a panic by sending a UDP datagram with a 1 byte payload over network.
This flaw was corrected by validating the size of the buffers before attempting to decode the message.
🎯 Affected products1
- rust/rosenpass:< 0.2.1