CVE-2022-31394

Опубликовано: 21 фев. 2023

Источник: debian

EPSS Низкий

Описание

Hyperium Hyper before 0.14.19 does not allow for customization of the max_header_list_size method in the H2 third-party software, allowing attackers to perform HTTP2 attacks.

Пакеты

Пакет	Статус	Версия исправления	Релиз	Тип
rust-hyper	fixed	0.14.19-1		package

EPSS

Процентиль: 53%

0.003

Низкий

Связанные уязвимости

CVE-2022-31394

CVSS3: 7.5

ubuntu

почти 3 года назад

Hyperium Hyper before 0.14.19 does not allow for customization of the max_header_list_size method in the H2 third-party software, allowing attackers to perform HTTP2 attacks.

CVE-2022-31394

CVSS3: 7.5

nvd

почти 3 года назад

Hyperium Hyper before 0.14.19 does not allow for customization of the max_header_list_size method in the H2 third-party software, allowing attackers to perform HTTP2 attacks.

CVE-2022-31394

CVSS3: 7.5

msrc

почти 3 года назад

Описание отсутствует

SUSE-SU-2024:0090-1

suse-cvrf

около 2 лет назад

Security update for gstreamer-plugins-rs

GHSA-x477-xp89-wc9r

CVSS3: 7.5

github

почти 3 года назад

Hyperium Hyper before 0.14.19 does not allow for customization of the max_header_list_size method in the H2 third-party software, allowing attackers to perform HTTP2 attacks.

EPSS

Процентиль: 53%

0.003

Низкий