Rosenpass Crate Denial-of-Service Vulnerability

A denial-of-service vulnerability has been identified in the Rosenpass crate for Rust, affecting versions prior to 0.2.1. The issue arises because the crate does not properly validate the size of buffers when decoding messages. This oversight allows remote attackers to cause a panic by sending a one-byte UDP packet. The vulnerability has been addressed in version 0.2.1.

Impact

Exploitation of this vulnerability leads to a panic, causing a denial-of-service condition by crashing the application.

Reproduction

The vulnerability can be reproduced by sending a UDP packet with a payload of one byte to a Rosenpass application running a vulnerable version. This can be done using network tools or scripts that allow for the manipulation of UDP packet contents.

Remediation

Users can upgrade to Rosenpass version 0.2.1 or later to address this vulnerability.