PkgSeer

Vulnerability GHSA-xp3w-r5p5-63rr

High Risk

6 months ago

rust-openssl has undefined behavior in X509Ref::ocsp_responders for certificates with non-UTF-8 OCSP URLs

0.9.7 - 0.10.78

Summary

rust-openssl has undefined behavior in X509Ref::ocsp_responders for certificates with non-UTF-8 OCSP URLs

Details

X509Ref::ocsp_responders returns OCSP responder URLs from a certificate's AIA extension as OpensslString, whose Deref<Target = str> wraps the raw bytes with str::from_utf8_unchecked. OpenSSL does not enforce that the underlying IA5String is ASCII, so a certificate with non-UTF-8 bytes in its OCSP accessLocation causes safe Rust code to construct a &str that violates the UTF-8 invariant — resulting in undefined behavior.

References

Related Vulnerabilities

Other vulnerabilities affecting the same packages

rust-openssl: Potential out-of-bounds write in `CipherCtxRef::cipher_update_inplace` for AES-KW-PAD ciphers

0.10.50 - 0.10.79 GHSA-phqj-4mhp-q6mq

rust-openssl vulnerable to heap buffer overflow when encrypting with AES key-wrap-with-padding

0.10.0 - 0.10.78 GHSA-xv59-967r-8726

rust-openssl: Deriver::derive and PkeyCtxRef::derive can overflow short buffers on OpenSSL 1.1.1

0.10.0 - 0.10.77 GHSA-pqf5-4pqq-29f5

rust-opennssl has an Out-of-bounds read in PEM password callback when returning an oversized length

0.9.0 - 0.10.77 GHSA-xmgf-hq76-4vx2

rust-openssl has incorrect bounds assertion in aes key wrap

0.10.24 - 0.10.77 GHSA-8c75-8mhr-p7r9

View all vulnerabilities for these packages

Impacted packages

openssl

Timeline

Published

6 months ago

Fixed (0.10.79)

6 months ago

Last Modified

2 months ago