Rust `rsa` Crate Panic Vulnerability When Loading Private Keys with Primes Equal to One

A vulnerability exists in the `rsa` crate, an RSA implementation in Rust, prior to version 0.9.10. When constructing an RSA private key from its components, the process panics if one of the primes is equal to one, instead of returning an appropriate error. This issue has been fixed in version 0.9.10.

Impact

The vulnerability can lead to a panic, causing a denial of service by abruptly terminating the program.

Reproduction

To reproduce this vulnerability, create an RSA private key using the `RsaPrivateKey::from_components` method. Include a prime that is equal to one in the components. The key construction will panic instead of handling the error gracefully.

Remediation

Users can upgrade to version 0.9.10 or later to address this vulnerability.