CVE-2023-39914
2 advisories.
crates.io/bcder CVE-2023-39914: high 7.5, EPSS 0.70%
BER/CER/DER decoder panics on invalid input
Action: Upgrade bcder to 0.7.3 or later.
cargo update -p bcder --precise 0.7.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.7.3 | - |
Fixed versions
| 0.7.3 |
Sources
- osv: GHSA-6jmw-6mxw-w4jc
- https://nvd.nist.gov/vuln/detail/CVE-2023-39914
- https://github.com/NLnetLabs/bcder/commit/4da91c3fd853e3d466d8581cf1d82b7f3255de56
- https://github.com/NLnetLabs/bcder
- https://nlnetlabs.nl/downloads/bcder/CVE-2023-39914.txt
- https://rustsec.org/advisories/RUSTSEC-2023-0062.html
CVE-2023-39914 · published · modified · JSON
crates.io/bcder CVE-2023-39914: high 7.5, EPSS 0.70%
BER/CER/DER decoder panics on invalid input
Action: Upgrade bcder to 0.7.3 or later.
cargo update -p bcder --precise 0.7.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.0.0-0 | 0.7.3 | - |
Fixed versions
| 0.7.3 |
Sources
- osv: RUSTSEC-2023-0062
- https://crates.io/crates/bcder
- https://rustsec.org/advisories/RUSTSEC-2023-0062.html
- https://nlnetlabs.nl/downloads/bcder/CVE-2023-39914.txt
- https://github.com/NLnetLabs/bcder/pull/74
CVE-2023-39914 · published · modified · JSON