cve.bz

CVE-2021-45711

7.5 highEPSS 1.4%

High (7.5) in simple asn1 project simple asn1. EPSS 1.4% chance of exploitation in the next 30 days. Fixed in simple_asn1 0.6.1.

An issue was discovered in the simple_asn1 crate 0.6.0 before 0.6.1 for Rust. There is a panic if UTCTime data, supplied by a remote attacker, has a second character greater than 0x7f.

Severity

CVSS 3.1

7.5 high
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS
1.4% chance of exploitation in the next 30 days; higher than 72% of CVEs (scores of 2026-10-31)
CWE
CWE-20
Published
Modified
Record from
the NVD, synced

Affected

Packages (OSV)

AdvisoryEcosystemPackageAffectedFixed in
GHSA-3m6f-3gfg-4x56crates.iosimple_asn1>=0.6.0 <0.6.10.6.1
GHSA-g4h2-4wvh-grc5crates.iosimple_asn1>=0.6.0 <0.6.10.6.1
RUSTSEC-2021-0125crates.iosimple_asn1>=0.6.0 <0.6.10.6.1

References

Check your stackJSON