{"id":28118,"date":"2023-01-06T07:01:12","date_gmt":"2023-01-06T07:01:12","guid":{"rendered":"https:\/\/mailinvest.blog\/index.php\/2023\/01\/06\/rust-projects-open-to-denial-of-service-thanks-to-hyper-the-register\/"},"modified":"2023-01-06T07:01:12","modified_gmt":"2023-01-06T07:01:12","slug":"rust-projects-open-to-denial-of-service-thanks-to-hyper-the-register","status":"publish","type":"post","link":"https:\/\/mailinvest.blog\/index.php\/2023\/01\/06\/rust-projects-open-to-denial-of-service-thanks-to-hyper-the-register\/","title":{"rendered":"Rust projects open to denial of service thanks to Hyper \u2022 The Register"},"content":{"rendered":"

<\/a>\n<\/p>\n

\n

Security researchers at have identified multiple vulnerabilities arising from careless use of the Rust Hyper package, a very popular library for handling HTTP requests.<\/p>\n

Security firm JFrog found that an undisclosed number of projects incorporating Hyper<\/a>, like Axum<\/a>, Salvo<\/a> and conduit-hyper<\/a>, were susceptible to denial of service (DoS) attacks arising from HTTP requests crafted to take advantage of the vulnerabilities.<\/p>\n

Those three have fixed their code, but an undisclosed number of other vulnerable projects have not yet responded, according to JFrog. Currently, 2,579 projects listed in Rust’s package repository crates.io depend on Hyper, which has been downloaded more than 67 million times.<\/p>\n

\n