| Details | | | --- | --- | | Package | `openssl` | | Version | `0.10.44` | | URL | https://github.com/sfackler/rust-openssl/issues/1965 | | Patched Versions | >=0.10.55 | | Aliases | [CVE-2023-53159](https://nvd.nist.gov/vuln/detail/CVE-2023-53159), [GHSA-xcf7-rvmh-g6q4](https://github.com/advisories/GHSA-xcf7-rvmh-g6q4) | When this function was passed an empty string, `openssl` would attempt to call `strlen` on it, reading arbitrary memory until it reached a NUL byte.
openssl0.10.44When this function was passed an empty string,
opensslwould attempt to callstrlenon it, reading arbitrary memory until it reached a NUL byte.