Skip to content
OpenAdvisories
Medium · 5.3 CVE-2023-53157 EUVD-2023-59768GHSA-6ggr-cwv4-g7qgRUSTSEC-2023-0077

Remotely exploitable denial of service in Rosenpass

Published Jul 27, 2025 · Updated Jul 28, 2025 · Assigned by mitre

Description

The rosenpass crate before 0.2.1 for Rust allows remote attackers to cause a denial of service (panic) via a one-byte UDP packet.

Affected products

VendorProductAffectedFixed
rosenpass rosenpass < 0.2.1 0.2.1

Affected packages

EcosystemPackageAffectedFixedRecord
crates.io rosenpass < 0.2.1 0.2.1 GHSA-6ggr-cwv4-g7qg
crates.io rosenpass >= 0.0.0-0, < 0.2.1 0.2.1 RUSTSEC-2023-0077

References