GHSA-XVC9-XWGJ-4CQ9 Duplicate Advisory: Integer Overflow in HeaderMap::reserve() can cause Denial of Service

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-x7vr-c387-8w57. This link is maintained to preserve external references. Original Description HeaderMap::reserve used usize::nextpoweroftwo to calculate the increased capacity. However, nextpoweroftwo silently...

GHSA-X7VR-C387-8W57 Integer Overflow/Infinite Loop in the http crate

HeaderMap::reserve used usize::nextpoweroftwo to calculate the increased capacity. However, nextpoweroftwo silently overflows to 0 if given a sufficiently large number in release mode. If the map was not empty when the overflow happens, the library will invoke self.grow0 and start infinite probin...

Mozilla Rust Integer Overflow Vulnerability

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. An integer overflow vulnerability exists in http in Mozilla Rust versions prior to 0.1.20, which stems from an integer overflow in HeaderMap::reserve when dealing with very large values, and can be exploited by ...

Integer overflow

An issue was discovered in the http crate before 0.1.20 for Rust. An integer overflow in HeaderMap::reserve could result in denial of service e.g., an infinite loop...

CVE-2020-25574

An issue was discovered in the http crate before 0.1.20 for Rust. An integer overflow in HeaderMap::reserve could result in denial of service e.g., an infinite loop...

CVE-2020-25574: Integer Overflow or Wraparound

An issue was discovered in the http crate before 0.1.20 for Rust. An integer overflow in HeaderMap::reserve could result in denial of service e.g., an infinite loop...

PT-2019-19975

Name of the Vulnerable Software and Affected Versions http crate versions prior to 0.1.20 Description An issue in the http crate for Rust could result in denial of service, such as an infinite loop, due to an integer overflow in HeaderMap::reserve. The HeaderMap::reserve function uses usize::next...

PT-2019-16425

Name of the Vulnerable Software and Affected Versions http crate versions prior to 0.1.20 Description The issue arises from the HeaderMap::reserve function using usize::next power of two to calculate the increased capacity. However, next power of two silently overflows to 0 if given a sufficientl...