TI-2020-18306 Aliases CVE-2020-35863 GHSA-h3qr-rq2j-74w4

An issue was discovered in the hyper crate before 0.12.34 for Rust.

MEDIUM 47CWE-444Published 2020-12-31 · Updated 2024-08-04

Key facts

Attack vector: Network
Privileges required: None
User interaction: None
Attack complexity: Low
Impact type: —
Confidentiality · integrity · availability: High · High · High
Fix status: Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA and GitHub.

Summary

An issue was discovered in the hyper crate before 0.12.34 for Rust. HTTP request smuggling can occur. Remote code execution can occur in certain situations with an HTTP server on the loopback interface.

Why it matters now

EPSS 0.02974 87th percentileScored 2026-11-07

Fix Fixed hyper (crates.io): 0.12.34

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
—	—	all versions	—	No fix listed	CNA
—	hyper (crates.io)	0.11.0 to before 0.12.34	0.12.34	Patch available	GHSA-h3qr-rq2j-74w4

— Vendor— Affected all versions Fixed in — No fix listed CNA
hyper (crates.io) Vendor— Affected 0.11.0 to before 0.12.34 Fixed in 0.12.34 Patch available GHSA-h3qr-rq2j-74w4

CPE configurations NVD · 1

CPE	Versions	Role	Vendor
cpe:2.3:a:hyper:hyper::::::rust::*	before 0.12.34	Vulnerable	hyperium

cpe:2.3:a:hyper:hyper:*:*:*:*:*:rust:*:* Versions before 0.12.34 Vulnerable ·hyperium

Remediation

Fix · GHSA-h3qr-rq2j-74w4 hyper (crates.io) Fixed in 0.12.34 Advisory →

Timeline

2026-10-02 Threatist record created from CVE-2020-35863
2026-10-03 Alias added: GHSA-h3qr-rq2j-74w4

References

Patch 1

https://rustsec.org/advisories/RUSTSEC-2020-0008.html

Advisory 1

https://nvd.nist.gov/vuln/detail/CVE-2020-35863

Other 2

TI-2023-11846 An issue was discovered in hyper v0.13.7. CVSS 3.1HIGH 7.5
TI-2022-13369 Hyperium Hyper before 0.14.19 does not allow for customization of the… CVSS 3.1HIGH 7.5
TI-2021-04399 Multiple Transfer-Encoding headers misinterprets request payload CVSS 3.1HIGH 8.1
TI-2021-12382 Integer Overflow in Chunked Transfer-Encoding CVSS 3.1CRITICAL 9.1
TI-2021-12383 Lenient Parsing of Content-Length Header When Prefixed with Plus Sign CVSS 3.1MEDIUM 5.3
TI-2017-13760 An issue was discovered in the hyper crate before 0.9.18 for Rust. CVSS 3.0MEDIUM 5.3

See all 7 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences