CVE-2022-31394
CVE-2022-31394
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Hyperium Hyper before 0.14.19 does not allow for customization of the max_header_list_size method in the H2 third-party software, allowing attackers to perform HTTP2 attacks.
CVSS 7.5 · High · EPSS 1.1% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
rust-hyper Debian:12
- Affected ranges
- ECOSYSTEM: < 0.14.19-1
Update to 0.14.19-1
rust-hyper Debian:13
- Affected ranges
- ECOSYSTEM: < 0.14.19-1
Update to 0.14.19-1
rust-hyper Debian:14
- Affected ranges
- ECOSYSTEM: < 0.14.19-1
Update to 0.14.19-1