Skip to content

Product

debian/rust-bcder vulnerabilities

1 published CVE affecting debian/rust-bcder, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
1
Medium
0
Low
0
Unscored
0
CISA KEV
0

Latest debian/rust-bcder CVEs

Newest publication first

  1. CVE-2023-39914 BER/CER/DER decoder panics on invalid input

    Published
    HighCVSS 7.5 EPSS 0.70%

    NLnet Labs' bcder library up to and including version 0.7.2 panics while decoding certain invalid input data rather than rejecting the data with an error. This can affect both the actual decoding stage as well as accessing content of types that utilized delayed decoding.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.