Executive brief
HTTPS MitM vulnerability due to lack of hostname verification
Affected products
- crates.io hyper
Junglewise Threat Intelligence
CVE-2016-10932: RUSTSEC-2016-0002 - HTTPS MitM vulnerability due to lack of hostname verification
CVE-2016-10932 · Severity: low · CVSS 3 · Published 2016-05-09
Technologies: hyper (crates.io). Vendors: crates.io.
Related threats
- Parser creates invalid uninitialized value
- RUSTSEC-2022-0022 - Parser creates invalid uninitialized value
- RUSTSEC-2021-0078 - Lenient `hyper` header parsing of `Content-Length` could allow request smuggling
- RUSTSEC-2021-0079 - Integer overflow in `hyper`'s parsing of the `Transfer-Encoding` header leads to data loss
- RUSTSEC-2021-0020 - Multiple Transfer-Encoding headers misinterprets request payload