Lucene search
+L

3 matches found

OSV
OSV
added 2022/10/31 6:44 p.m.80 views

GHSA-9398-5GHF-7PR6 conduit-hyper vulnerable to Denial of Service from unchecked request length

Prior to version 0.4.2, conduit-hyper did not check any limit on a request's length before calling hyper::body::tobytes. An attacker could send a malicious request with an abnormally large Content-Length, which could lead to a panic if memory allocation failed for that request. In version 0.4.2,...

7.5CVSS7.4AI score0.00689EPSS
SaveExploits0References5
Rows per page
Query Builder