crates.io/h2: medium 5.3
h2 servers vulnerable to degradation of service with CONTINUATION Flood
Action: Upgrade h2 to 0.3.26 or later.
cargo update -p h2 --precise 0.3.26cargo update -p h2 --precise 0.4.4Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.3.26 | - |
| 0.4.0 | 0.4.4 | - |
Fixed versions
| 0.3.26 | 0.4.4 |
Sources
- osv: GHSA-q6cp-qfwq-4gcv
- https://github.com/hyperium/h2
- https://rustsec.org/advisories/RUSTSEC-2024-0332.html
- https://seanmonstar.com/blog/hyper-http2-continuation-flood
- https://www.kb.cert.org/vuls/id/421644
published · modified · JSON