Lucene search
+L

3 matches found

OSV
OSV
added 2022/10/31 6:44 p.m.82 views

GHSA-9398-5GHF-7PR6 conduit-hyper vulnerable to Denial of Service from unchecked request length

Prior to version 0.4.2, conduit-hyper did not check any limit on a request's length before calling hyper::body::tobytes. An attacker could send a malicious request with an abnormally large Content-Length, which could lead to a panic if memory allocation failed for that request. In version 0.4.2,...

7.5CVSS7.4AI score0.00689EPSS
SaveExploits0References5
OSV
OSV
added 2022/10/30 12:0 p.m.40 views

RUSTSEC-2022-0066 Denial of Service from unchecked request length

Prior to version 0.4.2, conduit-hyper did not check any limit on a request's length before calling hyper::body::tobytes. An attacker could send a malicious request with an abnormally large Content-Length, which could lead to a panic if memory allocation failed for that request. In version 0.4.2,...

7.5CVSS7.4AI score0.00689EPSS
SaveExploits0References3
RustSec
RustSec
added 2022/10/30 12:0 p.m.22 views

Denial of Service from unchecked request length

Prior to version 0.4.2, conduit-hyper did not check any limit on a request's length before calling hyper::body::tobytes. An attacker could send a malicious request with an abnormally large Content-Length, which could lead to a panic if memory allocation failed for that request. In version 0.4.2,...

7.5CVSS3.3AI score0.00689EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder