CVE-2017-18587

MEDIUM

hyper <0.9.18 - Info Disclosure

Title source: llm
STIX 2.1

Description

An issue was discovered in the hyper crate before 0.9.18 for Rust. It mishandles newlines in headers.

References (1)

Scores

CVSS v3 5.3
EPSS 0.0022
EPSS Percentile 43.8%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Details

CWE
CWE-93
Status published
Products (2)
crates.io/hyper 0.10.0 - 0.10.2crates.io
hyper/hyper < 0.9.18
Published Aug 26, 2019
Tracked Since Feb 18, 2026