GHSA-6ggr-cwv4-g7qgMediumCVSS 5.3

Remotely exploitable denial of service in Rosenpass

Published
December 21, 2023
Last Modified
July 28, 2025

🔗 CVE IDs covered (1)

📋 Description

Affected versions of this crate did not validate the size of buffers when attempting to decode messages.

This allows an attacker to trigger a panic by sending a UDP datagram with a 1 byte payload over network.

This flaw was corrected by validating the size of the buffers before attempting to decode the message.

🎯 Affected products1

  • rust/rosenpass:< 0.2.1

🔗 References (4)