VDB
BDU%3A2023-03248
BDU%3A2023-03248
PUBLISHED
CVSS 7.800000190734863 HIGH
Уязвимость HTTP-библиотеки для Rust Hyper, связанная с неограниченным распределением ресурсов, позволяющая нарушителю вызвать отказ в обслуживании
Risk Scores
CVSS 2.0
7.800000190734863
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Сообщество свободного программного обеспечения, Novell Inc., Fedora Project, Hyperium | Debian GNU/Linux, SUSE Linux Enterprise Server for SAP Applications, Suse Linux Enterprise Server, Suse Linux Enterprise Desktop, Fedora, Hyper, h2 | |
| n/a | n/a | n/a |
Timeline
- Apr 11, 2023 CVE Published
- Apr 11, 2023 PoC Published
- Jun 20, 2023 CVE Updated
- Aug 17, 2025 PoC Published
References
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZHBAE7LQARMPUEEV4TWET4D7G6WCWBUD/ url
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZYRZ5Y2ALATKKPIITAFAJIS4TR4LUAHO/ url
- https://security-tracker.debian.org/tracker/CVE-2023-26964 url
- FEDORA-2023-cc21019773 vendor-advisory
- FEDORA-2023-37ae269843 vendor-advisory
- https://www.suse.com/security/cve/CVE-2023-26964.html url
- https://github.com/hyperium/hyper/issues/2877 advisory