cve/2016/CVE-2016-10931.md

CVE-2016-10931

Description

An issue was discovered in the openssl crate before 0.9.0 for Rust. There is an SSL/TLS man-in-the-middle vulnerability because certificate verification is off by default and there is no API for hostname verification.

POC

Reference

No PoCs from references.

Github

• https://github.com/ARPSyndicate/cvemon
• https://github.com/Artisan-Lab/Rust-memory-safety-bugs
• https://github.com/MaineK00n/go-osv
• https://github.com/chnzzh/OpenSSL-CVE-lib
• https://github.com/xxg1413/rust-security