crates.io/h2 CVE-2023-26964: medium, EPSS 1.12%

h2 vulnerable to denial of service

Action: Upgrade h2 to 0.3.17 or later.

cargo update -p h2 --precise 0.3.17

Affected

Fixed versions

Sources

• osv: GHSA-f8vr-r385-rh5r
• https://nvd.nist.gov/vuln/detail/CVE-2023-26964
• https://github.com/hyperium/h2/issues/621
• https://github.com/hyperium/hyper/issues/2877
• https://github.com/hyperium/h2/pull/668
• https://github.com/hyperium/hyper
• https://rustsec.org/advisories/RUSTSEC-2023-0034.html

CVE-2023-26964 · published 2023-04-11T15:30:30Z · modified 2023-11-08T04:12:03.011700Z · JSON