rust-openssl Heap Buffer Overflow Vulnerability in AES Key-Wrap-With-Padding Cipher

A heap buffer overflow vulnerability has been identified in rust-openssl versions 0.10.0 prior to 0.10.79. The issue arises in the OpenSSL bindings for Rust when the AES key-wrap-with-padding ciphers (EVP_aes_{128,192,256}_wrap_pad) are used. The vulnerability occurs because the output buffers are incorrectly sized, allowing OpenSSL to write up to 7 bytes beyond the end of the caller's buffer or Vec. This creates a risk of heap corruption that can be controlled by an attacker, particularly when the length of the plaintext is influenced by the attacker.

Impact

Exploitation of this vulnerability leads to heap buffer overflow, allowing for attacker-controlled memory corruption.

Remediation

Users can upgrade to rust-openssl version 0.10.79 or later to address this vulnerability.