hpack

Version	Released
`0.3.0` unknown 2 CVEs	Oct 22, 2015
`0.2.0` unknown 2 CVEs	Apr 11, 2015
`0.1.0` unknown 2 CVEs	Apr 04, 2015
`0.0.3` unknown 2 CVEs	Apr 02, 2015
`0.0.2` unknown 2 CVEs	Mar 28, 2015
`0.0.1` unknown 2 CVEs	Mar 13, 2015

0.3.0 unknown

2 CVEs

GHSA-w7hm-hmxv-pvhf RUSTSEC-2023-0085 Apr 05, 2024

HPACK decoder panics on invalid input

7.5 / 10

High

Network Low None None Unchanged None None High

Due to insufficient checking of input data, decoding certain data sequences can lead to Decoder::decode panicking rather than returning an error.

Example code that triggers this vulnerability looks like this:

use hpack::Decoder;

pub fn main() {
  let input = &[0x3f];
  let mut decoder = Decoder::new();
  let _ = decoder.decode(input);
}

hpack is unmaintained. A crate with the panics fixed has been published as hpack-patched.

Also consider using fluke-hpack or httlib-huffman as an alternative.

References

Updated Apr 11, 2024 · Source: OSV.dev

RUSTSEC-2023-0084 Sep 15, 2023

`hpack` is unmaintained

The hpack crate is no longer maintained.

Consider using fluke-hpack or httlib-huffman.

References

Updated Mar 06, 2024 · Source: OSV.dev

Oct 22, 2015

0.2.0 unknown

2 CVEs

GHSA-w7hm-hmxv-pvhf RUSTSEC-2023-0085 Apr 05, 2024

HPACK decoder panics on invalid input

7.5 / 10

High

Network Low None None Unchanged None None High

Due to insufficient checking of input data, decoding certain data sequences can lead to Decoder::decode panicking rather than returning an error.

Example code that triggers this vulnerability looks like this:

use hpack::Decoder;

pub fn main() {
  let input = &[0x3f];
  let mut decoder = Decoder::new();
  let _ = decoder.decode(input);
}

hpack is unmaintained. A crate with the panics fixed has been published as hpack-patched.

Also consider using fluke-hpack or httlib-huffman as an alternative.

References

Updated Apr 11, 2024 · Source: OSV.dev

RUSTSEC-2023-0084 Sep 15, 2023

`hpack` is unmaintained

The hpack crate is no longer maintained.

Consider using fluke-hpack or httlib-huffman.

References

Updated Mar 06, 2024 · Source: OSV.dev

Apr 11, 2015

0.1.0 unknown

2 CVEs

GHSA-w7hm-hmxv-pvhf RUSTSEC-2023-0085 Apr 05, 2024

HPACK decoder panics on invalid input

7.5 / 10

High

Network Low None None Unchanged None None High

Due to insufficient checking of input data, decoding certain data sequences can lead to Decoder::decode panicking rather than returning an error.

Example code that triggers this vulnerability looks like this:

use hpack::Decoder;

pub fn main() {
  let input = &[0x3f];
  let mut decoder = Decoder::new();
  let _ = decoder.decode(input);
}

hpack is unmaintained. A crate with the panics fixed has been published as hpack-patched.

Also consider using fluke-hpack or httlib-huffman as an alternative.

References

Updated Apr 11, 2024 · Source: OSV.dev

RUSTSEC-2023-0084 Sep 15, 2023

`hpack` is unmaintained

The hpack crate is no longer maintained.

Consider using fluke-hpack or httlib-huffman.

References

Updated Mar 06, 2024 · Source: OSV.dev

Apr 04, 2015

0.0.3 unknown

2 CVEs

GHSA-w7hm-hmxv-pvhf RUSTSEC-2023-0085 Apr 05, 2024

HPACK decoder panics on invalid input

7.5 / 10

High

Network Low None None Unchanged None None High

Due to insufficient checking of input data, decoding certain data sequences can lead to Decoder::decode panicking rather than returning an error.

Example code that triggers this vulnerability looks like this:

use hpack::Decoder;

pub fn main() {
  let input = &[0x3f];
  let mut decoder = Decoder::new();
  let _ = decoder.decode(input);
}

hpack is unmaintained. A crate with the panics fixed has been published as hpack-patched.

Also consider using fluke-hpack or httlib-huffman as an alternative.

References

Updated Apr 11, 2024 · Source: OSV.dev

RUSTSEC-2023-0084 Sep 15, 2023

`hpack` is unmaintained

The hpack crate is no longer maintained.

Consider using fluke-hpack or httlib-huffman.

References

Updated Mar 06, 2024 · Source: OSV.dev

Apr 02, 2015

0.0.2 unknown

2 CVEs

GHSA-w7hm-hmxv-pvhf RUSTSEC-2023-0085 Apr 05, 2024

HPACK decoder panics on invalid input

7.5 / 10

High

Network Low None None Unchanged None None High

Due to insufficient checking of input data, decoding certain data sequences can lead to Decoder::decode panicking rather than returning an error.

Example code that triggers this vulnerability looks like this:

use hpack::Decoder;

pub fn main() {
  let input = &[0x3f];
  let mut decoder = Decoder::new();
  let _ = decoder.decode(input);
}

hpack is unmaintained. A crate with the panics fixed has been published as hpack-patched.

Also consider using fluke-hpack or httlib-huffman as an alternative.

References

Updated Apr 11, 2024 · Source: OSV.dev

RUSTSEC-2023-0084 Sep 15, 2023

`hpack` is unmaintained

The hpack crate is no longer maintained.

Consider using fluke-hpack or httlib-huffman.

References

Updated Mar 06, 2024 · Source: OSV.dev

Mar 28, 2015

0.0.1 unknown

2 CVEs

GHSA-w7hm-hmxv-pvhf RUSTSEC-2023-0085 Apr 05, 2024

HPACK decoder panics on invalid input

7.5 / 10

High

Network Low None None Unchanged None None High

Due to insufficient checking of input data, decoding certain data sequences can lead to Decoder::decode panicking rather than returning an error.

Example code that triggers this vulnerability looks like this:

use hpack::Decoder;

pub fn main() {
  let input = &[0x3f];
  let mut decoder = Decoder::new();
  let _ = decoder.decode(input);
}

hpack is unmaintained. A crate with the panics fixed has been published as hpack-patched.

Also consider using fluke-hpack or httlib-huffman as an alternative.

References

Updated Apr 11, 2024 · Source: OSV.dev

RUSTSEC-2023-0084 Sep 15, 2023

`hpack` is unmaintained

The hpack crate is no longer maintained.

Consider using fluke-hpack or httlib-huffman.

References

Updated Mar 06, 2024 · Source: OSV.dev

Mar 13, 2015

Activity

Details