GHSA-xcf7-rvmh-g6q4MediumCVSS 4.5
`openssl` `X509VerifyParamRef::set_host` buffer over-read
🔗 CVE IDs covered (1)
📋 Description
When this function was passed an empty string, openssl would attempt to call strlen on it, reading arbitrary memory until it reached a NUL byte.
🎯 Affected products1
- rust/openssl:>= 0.10.0, < 0.10.55