Skip to content
Fencer Vulns
medium 4.5

CVE-2023-53159 json

`openssl` `X509VerifyParamRef::set_host` buffer over-read

published 2023-06-20 3 y ago modified 2026-09-17 52 d ago also GHSA-xcf7-rvmh-g6q4 , RUSTSEC-2023-0044 , EUVD-2023-59771

cvss
4.5
version 3.1, CNA
cisa kev
Not listed
not in CISA's catalog
epss
0.2%
EPSS 0.2% chance of exploitation in 30 days, percentile 13%
public exploits
0
none known

Summary

The openssl crate before 0.10.55 for Rust allows an out-of-bounds read via an empty string to X509VerifyParamRef::set_host.

Patch / fix

  • crates.io openssl 0.10.55
  • sfackler openssl 0.10.55
  • rust-openssl Debian 14, Debian 13 0.10.57-1

debian advisories DEBIAN-CVE-2023-53159

  • rust-openssl Ubuntu Pro 20.04 LTS 0.10.23-1ubuntu0.1~esm1
  • rust-openssl Ubuntu Pro 22.04 LTS 0.10.36-1ubuntu0.1~esm1

ubuntu advisories UBUNTU-CVE-2023-53159

Ubuntu security data © Canonical Ltd., from https://github.com/canonical/ubuntu-security-notices via OSV; changed: normalised to fixed package versions per release. CC BY-SA 4.0

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

red hat product security vex CVE-2023-53159 updated cvss 5.7

openssl: OpenSSL: Out-of-bounds Read Vulnerability

  • Red Hat Logging Subsystem for Red Hat OpenShift openshift-logging/vector-rhel9, openshift-logging/eventrouter-rhel9, openshift-logging/cluster-logging-rhel9-operator, openshift-logging/log-file-metric-exporter-rhel9, openshift-logging/cluster-logging-operator-bundle Red Hat OpenShift Service Mesh 3 openshift-service-mesh/istio-cni-rhel9, openshift-service-mesh/istio-pilot-rhel9, openshift-service-mesh/istio-proxyv2-rhel9, openshift-service-mesh/istio-rhel9-operator, openshift-service-mesh/istio-must-gather-rhel9, openshift-service-mesh/istio-sail-operator-bundle, +1 more Red Hat Enterprise Linux 7 firefox Red Hat Enterprise Linux 8 firefox, rpm-ostree, rpm-ostree-libs Red Hat Enterprise Linux 9 gjs, firefox, rpm-ostree, 389-ds-base, firefox-x11, python3-lib389, +4 more Red Hat Enterprise Linux 10 gjs, firefox
    +1 more products
    Red Hat OpenShift Container Platform 4 conmon-rs, rpm-ostree, kata-containers, rpm-ostree-libs
    affected: workaround, no fix available “Fix deferred”
  • Red Hat Confidential Compute Attestation confidential-compute-attestation-tech-preview/trustee-rhel9 Red Hat Directory Server 11 389-ds-base Red Hat Directory Server 12 389-ds-base Red Hat Discovery 2 discovery/discovery-server-rhel9 Red Hat Enterprise Linux 6 openssl, openssl-perl Red Hat Enterprise Linux 7 openssl, openssl-libs, openssl-perl
    +9 more products
    Red Hat Enterprise Linux 8 mozjs60, openssl, 389-ds-base, openssl-libs, openssl-perl, mingw-openssl, +9 more Red Hat Enterprise Linux 9 ctdb, bootc, samba, libldb, polkit, bootupd, +40 more Red Hat Enterprise Linux 10 bootc, samba, openssl, s390utils, rpm-ostree, 389-ds-base, +5 more Red Hat JBoss Core Services openssl Red Hat Offline Knowledge Portal offline-knowledge-portal/rhokp-rhel9 Red Hat OpenShift Container Platform 4 bootupd, rust-bootupd, openshift/ose-rhel-coreos-8, openshift/ose-rhel-coreos-9 Red Hat Satellite 6 satellite/iop-advisor-engine-rhel9 Red Hat Trusted Artifact Signer rhtas/tuffer-rhel9, rhtas/tuftool-rhel9 Red Hat Trusted Profile Analyzer rhtpa/rhtpa-trustification-service-rhel9
    not affected: vulnerable code not present

Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf

CISA SSVC

Exploitation
none
Automatable
no
Technical impact
partial
Assessed
15 mo ago

Exploit prediction

0.23% chance of exploitation in the next 30 days, higher than 13% of all scored CVEs (FIRST EPSS, 2026-11-08).

Exploits and checks

  • github.com https://github.com/sfackler/rust-openssl/issues/1965 referenced PoC, tagged "exploit" by a source, unverified

CVSS scores

assigned by version score vector
CNA 3.1 4.5 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:L
NVD 3.1 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
GitHub 3.1 4.5 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:L

Affected packages

ecosystem package affected fixed in
crates.io openssl
>=0.10.0, <0.10.55
>=0.0.0-0, <0.10.55
0.10.55

Affected products

  • sfackler openssl

Classification

Weakness

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.