CVE-2020-35863 in hyper Crate

Summary

by MITRE • 12/31/2020

An issue was discovered in the hyper crate before 0.12.34 for Rust. HTTP request smuggling can occur. Remote code execution can occur in certain situations with an HTTP server on the loopback interface.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

• Disclosure: 12/31/2020
• Moderation: accepted
• Entry: VDB-167095
• CPE: ready
• CWE: CWE-444 (confirmed)
• CVSS: 6.3 (VulDB)
• EPSS: 0.02774
• KEV: no
• Activities: very low
• Sector: Telecommunication

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2020-35863
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2020-35863
• CVE Details: https://www.cvedetails.com/cve/CVE-2020-35863/