CVE-2017-18587: CRLF Injection
Published Aug 26, 2019
·Updated
An issue was discovered in the hyper crate before 0.9.18 for Rust. It mishandles newlines in headers.
Affected Software
2 affected components
hyper hyper<0.9.18
hyper hyper>=0.10.0<0.10.2
Event History
Aug 26, 2019
CVE Published
via MITRE·12:05 PM
Data Sourced
via MITRE·12:05 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2017-18587?
CVE-2017-18587 is classified as a moderate severity vulnerability due to its potential impact on header processing in the hyper crate.
2
How do I fix CVE-2017-18587?
To fix CVE-2017-18587, update the hyper crate to version 0.9.18 or later, or ensure that you're using versions later than 0.10.2.
3
What are the affected versions of hyper in CVE-2017-18587?
CVE-2017-18587 affects hyper versions prior to 0.9.18 and versions from 0.10.0 to 0.10.2.
4
What kind of issue does CVE-2017-18587 represent?
CVE-2017-18587 is a mishandling of newlines in headers, which can lead to unexpected behavior in applications using the hyper crate.
5
Is CVE-2017-18587 relevant for production systems?
Yes, CVE-2017-18587 is relevant as it can impact the security and functionality of production systems utilizing affected versions of the hyper crate.