CVE-2020-35863
CVE-2020-35863
This page contains facts from public vulnerability sources. Check the original advisory before updating.
An issue was discovered in the hyper crate before 0.12.34 for Rust. HTTP request smuggling can occur. Remote code execution can occur in certain situations with an HTTP server on the loopback interface.
CVSS 9.8 · Critical · EPSS 3.0% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
rust-hyper Debian:12
- Affected ranges
- ECOSYSTEM: < 0.12.35-1
Update to 0.12.35-1
rust-hyper Debian:13
- Affected ranges
- ECOSYSTEM: < 0.12.35-1
Update to 0.12.35-1
rust-hyper Debian:14
- Affected ranges
- ECOSYSTEM: < 0.12.35-1
Update to 0.12.35-1