Name of the Vulnerable Software and Affected Versions:

rosenpass crate versions prior to 0.2.1

Description:

The rosenpass crate is susceptible to a denial of service (panic) caused by a one-byte UDP packet sent by a remote attacker.

Recommendations:

Update the rosenpass crate to version 0.2.1 or later.