CVE-2023-53157

MEDIUM

rosenpass < 0.2.1 - Denial of Service via One-Byte UDP Packet

Title source: llm

The rosenpass crate before 0.2.1 for Rust allows remote attackers to cause a denial of service (panic) via a one-byte UDP packet.

Core 4

Core References

Product

Third Party Advisory

Patch

Third Party Advisory

CVSS v3 5.3

EPSS 0.0049

EPSS Percentile 37.8%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Vulnrichment

Exploitation none

Automatable yes

Technical Impact partial

CWE

CWE-130

Status published

Products (2)

crates.io/rosenpass 0 - 0.2.1crates.io

rosenpass/rosenpass < 0.2.1

Published Jul 28, 2025

Tracked Since Feb 18, 2026