tocsin

CVE-2017-18587

2 advisories.

crates.io/hyper CVE-2017-18587: medium 5.3, EPSS 1.03%

Headers containing newline characters can split messages in hyper

Action: Upgrade hyper to 0.9.18 or later.

cargo update -p hyper --precise 0.10.2
cargo update -p hyper --precise 0.9.18

Affected

introducedfixedlast affected
0.10.00.10.2-
00.9.18-

Fixed versions

0.10.20.9.18

Sources

CVE-2017-18587 · published · modified · JSON

crates.io/hyper CVE-2017-18587: medium 5.3, EPSS 1.03%

headers containing newline characters can split messages

Action: Upgrade hyper to 0.9.18 or later.

cargo update -p hyper --precise 0.9.18
cargo update -p hyper --precise 0.10.2

Affected

introducedfixedlast affected
0.0.0-00.9.18-
0.10.00.10.2-

Fixed versions

0.9.180.10.2

Sources

CVE-2017-18587 · published · modified · JSON