https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-29T16:42:20.932470+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2023-53159 CVE-2023-53159 2026-09-29T16:42:20.935547+00:00

Affected: sfackler openssl

The openssl crate before 0.10.55 for Rust allows an out-of-bounds read via an empty string to X509VerifyParamRef::set_host.

 https://vulnerability.circl.lu/vuln/usn-7891-1 USN-7891-1 — rust-openssl vulnerabilities 2026-09-29T16:42:20.935660+00:00

Affected: Ubuntu:Pro:20.04:LTS: rust-openssl, Ubuntu:Pro:22.04:LTS: rust-openssl, Ubuntu:Pro:24.04:LTS: rust-openssl

Matt Mastracci discovered that rust-openssl was incorrectly handling server lifetimes in certain functions. An attacker could possibly use this issue to cause a denial of service or run arbitrary memory content to the client. (CVE-2025-24898)

It was discovered that rust-openssl was incorrectly handling empty strings when setting the host in certain functions. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 20.04 LTS and Ubuntu 22.04 LTS. (CVE-2023-53159)

It was discovered that rust-openssl was incorrectly handling property arguments in certain functions. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 24.04 LTS. (CVE-2025-3416)