Debian/rust-hyper: critical 9.8
An issue was discovered in the hyper crate before 0.12.34 for Rust. HTTP request smuggling can occur. Remote code execution can occur in certain situations with an HTTP server on the loopback interfac
Action: Upgrade rust-hyper to 0.12.35-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.12.35-1 | - |
Fixed versions
| 0.12.35-1 |
Sources
- osv: DEBIAN-CVE-2020-35863#Debian:14/rust-hyper
- https://security-tracker.debian.org/tracker/CVE-2020-35863
published · modified · JSON