PkgSeer

Vulnerability GHSA-pqf5-4pqq-29f5

High Risk

6 months ago

rust-openssl: Deriver::derive and PkeyCtxRef::derive can overflow short buffers on OpenSSL 1.1.1

0.10.0 - 0.10.77

Summary

rust-openssl: Deriver::derive and PkeyCtxRef::derive can overflow short buffers on OpenSSL 1.1.1

Details

Deriver::derive (and PkeyCtxRef::derive) sets len = buf.len() and passes it as the in/out length to EVP_PKEY_derive, relying on OpenSSL to honor it. On OpenSSL 1.1.x, X25519, X448, DH and HKDF-extract ignore the incoming *keylen, unconditionally writing the full shared secret (32/56/prime-size bytes). A caller passing a short slice gets a heap/stack overflow from safe code. OpenSSL 3.x providers do check, so this only impacts older OpenSSL.

References

Related Vulnerabilities

Other vulnerabilities affecting the same packages

rust-openssl: Potential out-of-bounds write in `CipherCtxRef::cipher_update_inplace` for AES-KW-PAD ciphers

0.10.50 - 0.10.79 GHSA-phqj-4mhp-q6mq

rust-openssl vulnerable to heap buffer overflow when encrypting with AES key-wrap-with-padding

0.10.0 - 0.10.78 GHSA-xv59-967r-8726

rust-openssl has undefined behavior in X509Ref::ocsp_responders for certificates with non-UTF-8 OCSP URLs

0.9.7 - 0.10.78 GHSA-xp3w-r5p5-63rr

rust-opennssl has an Out-of-bounds read in PEM password callback when returning an oversized length

0.9.0 - 0.10.77 GHSA-xmgf-hq76-4vx2

rust-openssl has incorrect bounds assertion in aes key wrap

0.10.24 - 0.10.77 GHSA-8c75-8mhr-p7r9

View all vulnerabilities for these packages

Impacted packages

openssl

Timeline

Published

6 months ago

Fixed (0.10.78)

6 months ago

Last Modified

2 months ago