← All advisories

Medium severity5.3NVD Advisory· Published Jul 28, 2025· Updated Jun 17, 2026

CVE-2023-53157

CVE-2023-53157

Description

The rosenpass crate before 0.2.1 for Rust allows remote attackers to cause a denial of service (panic) via a one-byte UDP packet.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
rosenpasscrates.io	< 0.2.1	0.2.1

Affected products

3

Rosenpass/rosenpass2 versions
cpe:2.3:a:rosenpass:rosenpass:*:*:*:*:*:rust:*:*+ 1 more
- cpe:2.3:a:rosenpass:rosenpass:*:*:*:*:*:rust:*:*range: <0.2.1
- (no CPE)range: 0
ghsa-coords
pkg:cargo/rosenpass
Range: < 0.2.1

Patches

Vulnerability mechanics

References

5

github.com/rosenpass/rosenpass/commit/93439858d1c44294a7b377f775c4fc897a370bb2nvdPatchWEB
github.com/advisories/GHSA-6ggr-cwv4-g7qgnvdThird Party AdvisoryADVISORY
nvd.nist.gov/vuln/detail/CVE-2023-53157ghsaADVISORY
rustsec.org/advisories/RUSTSEC-2023-0077.htmlnvdThird Party AdvisoryWEB
crates.io/crates/rosenpassnvdProduct

News mentions

0

No linked articles in our index yet.