Описание
h2 vulnerable to denial of service
Hyper is an HTTP library for Rust and h2 is an HTTP 2.0 client & server implementation for Rust. An issue was discovered in h2 v0.2.4 when processing header frames. It incorrectly processes the HTTP2 RST_STREAM frames by not always releasing the memory immediately upon receiving the reset frame, leading to stream stacking. As a result, the memory and CPU usage are high which can lead to a Denial of Service (DoS).
This issue affects users only when dealing with http2 connections.
Пакеты
h2
< 0.3.17
0.3.17
Связанные уязвимости
An issue was discovered in hyper v0.13.7. h2-0.2.4 Stream stacking occurs when the H2 component processes HTTP2 RST_STREAM frames. As a result, the memory and CPU usage are high which can lead to a Denial of Service (DoS).
An issue was discovered in hyper v0.13.7. h2-0.2.4 Stream stacking occurs when the H2 component processes HTTP2 RST_STREAM frames. As a result, the memory and CPU usage are high which can lead to a Denial of Service (DoS).
An issue was discovered in hyper v0.13.7. h2-0.2.4 Stream stacking occ ...
Уязвимость HTTP-библиотеки для Rust Hyper, связанная с неограниченным распределением ресурсов, позволяющая нарушителю вызвать отказ в обслуживании