Executive brief
headers containing newline characters can split messages
Affected products
- crates.io hyper
Junglewise Threat Intelligence
CVE-2017-18587: RUSTSEC-2017-0002 - headers containing newline characters can split messages
CVE-2017-18587 · Severity: low · CVSS 3 · Published 2017-01-23
Technologies: hyper (crates.io). Vendors: crates.io.
Related threats
- Parser creates invalid uninitialized value
- RUSTSEC-2022-0022 - Parser creates invalid uninitialized value
- RUSTSEC-2021-0078 - Lenient `hyper` header parsing of `Content-Length` could allow request smuggling
- RUSTSEC-2021-0079 - Integer overflow in `hyper`'s parsing of the `Transfer-Encoding` header leads to data loss
- RUSTSEC-2021-0020 - Multiple Transfer-Encoding headers misinterprets request payload