CVE-2023-53161: Medium severity Rust buffered-reader vulnerability
Affected versions of the crate have a bug where attacker-controlled input can result in the use of an out-of-bound array index. Rust detects the use of the out-of-bound index and causes the application to panic. An attacker may be able to use this to cause a denial-of-service. However, it is not possible for an attacker to read from or write to the application's address space.
Other sources
The buffered-reader crate before 1.1.5 for Rust allows out-of-bounds array access and a panic.
— NVD
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2023-53161?
CVE-2023-53161 is considered a moderate severity vulnerability due to its potential for causing a panic through out-of-bounds array access.
How do I fix CVE-2023-53161?
To fix CVE-2023-53161, upgrade the buffered-reader crate to version 1.2.0 or later.
What software is affected by CVE-2023-53161?
CVE-2023-53161 affects the buffered-reader crate in Rust versions prior to 1.2.0.
What type of vulnerability is CVE-2023-53161?
CVE-2023-53161 is classified as an out-of-bounds access vulnerability that may lead to a crash.
When was CVE-2023-53161 disclosed?
CVE-2023-53161 was disclosed prior to the release of buffered-reader version 1.2.0.