http crate up to 0.1.19 on Rust HeaderMap::reserve integer overflow

Summaryinfo

A vulnerability described as problematic has been identified in http crate up to 0.1.19 on Rust. The affected element is the function HeaderMap::reserve. Executing a manipulation can lead to integer overflow. The identification of this vulnerability is CVE-2019-25008. There is no exploit available. Upgrading the affected component is recommended.

Detailsinfo

A vulnerability was found in http crate up to 0.1.19 on Rust (Rust Package). It has been declared as problematic. This vulnerability affects the function HeaderMap::reserve. The manipulation with an unknown input leads to a integer overflow vulnerability. The CWE definition for the vulnerability is CWE-190. The product performs a calculation that can produce an integer overflow or wraparound, when the logic assumes that the resulting value will always be larger than the original value. This can introduce other weaknesses when the calculation is used for resource management or execution control. As an impact it is known to affect availability.

The weakness was shared 12/31/2020 as RUSTSEC-2019-0033. The advisory is available at rustsec.org. This vulnerability was named CVE-2019-25008. Technical details are known, but there is no available exploit.

Upgrading to version 0.1.20 eliminates this vulnerability.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Productinfo

Type

• Rust Package

Name

• http crate

Version

• 0.1.0
• 0.1.1
• 0.1.2
• 0.1.3
• 0.1.4
• 0.1.5
• 0.1.6
• 0.1.7
• 0.1.8
• 0.1.9
• 0.1.10
• 0.1.11
• 0.1.12
• 0.1.13
• 0.1.14
• 0.1.15
• 0.1.16
• 0.1.17
• 0.1.18
• 0.1.19

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Discussion