4605 matches found
a2 (>=0.2.0, <=0.5.3), abci-rs (0.10.0) +5478 more potentially affected by CVE-2021-32714 via hyper (>=0.0.1, <=0.14.5)
hyper CARGO version =0.0.1, =0.2.0, =0.1.0, =0.1.0, =0.1.0, =0.0.1, =0.0.7-alpha.3, =0.0.7-alpha.2, =0.0.7-alpha.1, =0.0.7-alpha.3, =0.1.0, =0.1.0, =1.0.0, =0.1.0, =0.9.1 and more Source cves: CVE-2021-32714 Source advisory: OSV:RUSTSEC-2021-0079...
RUSTSEC-2021-0078 Lenient `hyper` header parsing of `Content-Length` could allow request smuggling
hyper's HTTP header parser accepted, according to RFC 7230, illegal contents inside Content-Length headers. Due to this, upstream HTTP proxies that ignore the header may still forward them along if it chooses to ignore the error. To be vulnerable, hyper must be used as an HTTP/1 server and using ...
RUSTSEC-2021-0079 Integer overflow in `hyper`'s parsing of the `Transfer-Encoding` header leads to data loss
When decoding chunk sizes that are too large, hyper's code would encounter an integer overflow. Depending on the situation, this could lead to data loss from an incorrect total size, or in rarer cases, a request smuggling attack. To be vulnerable, you must be using hyper for any HTTP/1 purpose,...
CVE-2021-32714: Integer Overflow or Wraparound
hyper is an HTTP library for Rust. In versions prior to 0.14.10, hyper's HTTP server and client code had a flaw that could trigger an integer overflow when decoding chunk sizes that are too big. This allows possible data loss, or if combined with an upstream HTTP proxy that allows chunk sizes...
CVE-2021-32715: Inconsistent Interpretation of HTTP Requests
hyper is an HTTP library for rust. hyper's HTTP/1 server code had a flaw that incorrectly parses and accepts requests with a Content-Length header with a prefixed plus sign, when it should have been rejected as illegal. This combined with an upstream HTTP proxy that doesn't parse such...
hyperium hyper 输入验证错误漏洞
hyperium hyper is an open source HTTP library for Rust. It is intended to be a building block for libraries and applications. An input validation error vulnerability exists in hyperium hyper, which stems from an integer overflow that may be triggered when decoding too large of a block size in...
PT-2021-6447
Name of the Vulnerable Software and Affected Versions hyper versions prior to 0.14.10 Description The issue is related to the incorrect parsing and acceptance of requests with a Content-Length header containing a prefixed plus sign. This can lead to "request smuggling" or "desync attacks" when...
PT-2021-6699
Name of the Vulnerable Software and Affected Versions hyper versions prior to 0.14.10 Description The issue is related to an integer overflow when decoding chunk sizes that are too big, which can trigger data loss or, in certain cases, "request smuggling" or "desync attacks" if combined with an...
hyperium hyper 环境问题漏洞
hyperium hyper is an open source HTTP library for Rust. It is intended to be a building block for libraries and applications. A vulnerability exists in hyperium hyper, which arises from the hyper's HTTP/1 server incorrectly parsing and accepting requests with the "Content-Length" header...
Security update for virtualbox (important)
openSUSE Security Update: Security update for virtualbox Announcement ID: openSUSE-SU-2021:0977-1 Rating: important References: 1182918 1186361 Cross-References: CVE-2021-2145 CVE-2021-2250 CVE-2021-2264 CVE-2021-2266 CVE-2021-2279 CVE-2021-2280 CVE-2021-2281 CVE-2021-2282 CVE-2021-2283...
The vulnerability of the Hyper-V component of the Windows operating system, which allows a hacker to trigger a service failure
The vulnerability of the Hyper-V component of the Windows operating system is related to operations that go beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to cause a service failure...
Security Bulletin: Privilege escalation vulnerability in IBM Spectrum Protect Backup-Archive Client and IBM Spectrum Protect for Virtual Environments (CVE-2021-20532)
Summary IBM Spectrum Protect Backup-Archive Client and IBM Spectrum Protect for Virtual Environments may allow a local user to escalate their privileges. UPDATED: 14 June 2021 - Added 7.1 fix for IBM Spectrum Protect for Virtual Environments: Data Protection for VMware. Vulnerability Details CVEI...
bpftool, kernel, perf, python security update
CentOS Errata and Security Advisory CESA-2021:2314 An update for kernel is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...
How to Migrate GEN2 Hyper-V Machines to Citrix Hypervisor
Migrate VMs from Hyper-v to Xenserver/Citrix Hypervisor...
Microsoft Windows Multiple Vulnerabilities (KB5003638)
This host is missing a critical security update according to Microsoft KB5003638 SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE: Security Advisory (SUSE-SU-2012:0817-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2021-31977
Windows Hyper-V Denial of Service Vulnerability...
CVE-2021-31977
Windows Hyper-V Denial of Service Vulnerability...
