CVE-2023-46135

MEDIUM

rs-stellar-strkey < 0.0.8 - Denial of Service via Crafted Payload

Title source: llm

Description

rs-stellar-strkey is a Rust lib for encode/decode of Stellar Strkeys. A panic vulnerability occurs when a specially crafted payload is used.`inner_payload_len` should not above 64. This vulnerability has been patched in version 0.0.8.

References (2)

Core 2

Core References

Exploit, Vendor Advisory x_refsource_confirm

https://github.com/stellar/rs-stellar-strkey/security/advisories/GHSA-5873-6fwq-463f

Exploit, Issue Tracking x_refsource_misc

https://github.com/stellar/rs-stellar-strkey/issues/58

Scores

CVSS v3 5.3

EPSS 0.0076

EPSS Percentile 50.4%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

CISA SSVC

Vulnrichment

Exploitation poc

Automatable yes

Technical Impact partial

Details

CWE

CWE-248

Status published

Products (2)

crates.io/stellar-strkey 0 - 0.0.8crates.io

stellar/rs-stellar-strkey < 0.0.8

Published Oct 25, 2023

Tracked Since Feb 18, 2026