Unrated
An issue was discovered in the hyper crate before 0.12.34 for Rust. HTTP request smuggling can occur. Remote code execution can occur in certain situa...
CVE-2020-35863
First seen on SecPulse
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2020-35863 rust-hyper Fixed in: 0.12.35-1
Original description The description as published by the source.
An issue was discovered in the hyper crate before 0.12.34 for Rust. HTTP request smuggling can occur. Remote code execution can occur in certain situations with an HTTP server on the loopback interface.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
References
- patch rustsec.org