Hyper

13 CVEs across 6 Hyper products. Browse Hyper vulnerabilities, severities, and proof-of-concept exploits.

Hyper products with known CVEs

ProductCVEs
Hyper8
HTTP2
Cdcatalog1
H21
Hyperstart1
Runv1
Hyper CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2024-1191Low3.32024-02-29A vulnerability was found in Hyper CdCatalog 2.3.1. It has been classified as problematic. This affects an unknown part of the component HCF File Handler. The…
CVE-2023-26964High7.52023-04-11An issue was discovered in hyper v0.13.7. h2-0.2.4 Stream stacking occurs when the H2 component processes HTTP2 RST_STREAM frames. As a result, the memory and…
CVE-2022-31394High7.52023-02-21Hyperium Hyper before 0.14.19 does not allow for customization of the max_header_list_size method in the H2 third-party software, allowing attackers to perform…
CVE-2021-32715Low3.12021-07-07hyper is an HTTP library for rust. hyper's HTTP/1 server code had a flaw that incorrectly parses and accepts requests with a `Content-Length` header with a pre…
CVE-2021-32714Medium5.92021-07-07hyper is an HTTP library for Rust. In versions prior to 0.14.10, hyper's HTTP server and client code had a flaw that could trigger an integer overflow when dec…
CVE-2021-21299Medium4.82021-02-11hyper is an open-source HTTP library for Rust (crates.io). In hyper from version 0.12.0 and before versions 0.13.10 and 0.14.3 there is a vulnerability that ca…
CVE-2020-35863Critical9.82020-12-31An issue was discovered in the hyper crate before 0.12.34 for Rust. HTTP request smuggling can occur. Remote code execution can occur in certain situations wit…
CVE-2019-25009Critical9.82020-12-31An issue was discovered in the http crate before 0.1.20 for Rust. The HeaderMap::Drain API can use a raw pointer, defeating soundness.
CVE-2020-25574High7.52020-09-14An issue was discovered in the http crate before 0.1.20 for Rust. An integer overflow in HeaderMap::reserve() could result in denial of service (e.g., an infin…
CVE-2017-18587Medium5.32019-08-26An issue was discovered in the hyper crate before 0.9.18 for Rust. It mishandles newlines in headers.
CVE-2016-10932Medium4.82019-08-26An issue was discovered in the hyper crate before 0.9.4 for Rust on Windows. There is an HTTPS man-in-the-middle vulnerability because hostname verification wa…
CVE-2018-10205Medium5.32018-04-19hyperstart 1.0.0 in HyperHQ Hyper has memory leaks in the container_setup_modules and hyper_rescan_scsi functions in container.c, related to runV 1.0.0 for Doc…
CVE-2018-9862High7.82018-04-09util.c in runV 1.0.0 for Docker mishandles a numeric username, which allows attackers to obtain root access by leveraging the presence of an initial numeric va…