Skip to content
OpenAdvisories
Medium · 5.3 CVE-2023-46135 EUVD-2023-2655GHSA-5873-6fwq-463f

Panic in SignedPayload::from_payload

Published Oct 25, 2023 · Updated Sep 10, 2024 · Assigned by GitHub_M

Description

rs-stellar-strkey is a Rust lib for encode/decode of Stellar Strkeys. A panic vulnerability occurs when a specially crafted payload is used.`inner_payload_len` should not above 64. This vulnerability has been patched in version 0.0.8.

Affected products

VendorProductAffectedFixed
stellar rs-stellar-strkey < 0.0.8 —

Affected packages

EcosystemPackageAffectedFixedRecord
crates.io stellar-strkey < 0.0.8 0.0.8 GHSA-5873-6fwq-463f

References