Skip to content
OpenAdvisories

Vendor

hyperium

4 known vulnerabilities.

Products

hyper 3 tonic 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.9
    CVE-2024-47609

    Remotely exploitable DoS in Tonic `<=v0.12.2`

    Tonic is a native gRPC client & server implementation with async/await support. When using tonic::transport::Server there is a remote DoS attack that can cause the server to exit cleanly on accepting a TCP/TLS stream. This can be triggered by causing the acce…

    hyperium tonic tonic rust-tonic Ubuntu crates.io
  • Medium 5.9
    CVE-2021-32714

    Integer Overflow in Chunked Transfer-Encoding

    hyper is an HTTP library for Rust. In versions prior to 0.14.10, hyper's HTTP server and client code had a flaw that could trigger an integer overflow when decoding chunk sizes that are too big. This allows possible data loss, or if combined with an upstream …

    hyperium hyper hyper rust-hyper Debian Ubuntu crates.io
  • Medium 4.8
    CVE-2021-21299

    Multiple Transfer-Encoding headers misinterprets request payload

    hyper is an open-source HTTP library for Rust (crates.io). In hyper from version 0.12.0 and before versions 0.13.10 and 0.14.3 there is a vulnerability that can enable a request smuggling attack. The HTTP server code had a flaw that incorrectly understands so…

    hyperium hyper hyper rust-hyper Debian Ubuntu crates.io