CVE-2024-45797CWE-770

LibHTP's unbounded header handling leads to denial service

High · published October 16, 2024

CVSS v3.1
7.5
EPSS
1%
Percentile
53.9
In the wild
Unconfirmed
What it is

LibHTP is a security-aware parser for the HTTP protocol and the related bits and pieces. Prior to version 0.5.49, unbounded processing of HTTP request and response headers can lead to excessive CPU time and memory utilization, possibly leading to extreme slowdowns. This issue is addressed in 0.5.49.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00735 · 53.9th percentile
Weakness
CWE-770 · Allocation of Resources Without Limits or Throttling
Published
2024-10-16T18:45Z
EPSS history
Timeline
  • 16 OCT 18:45Z
    LibHTP's unbounded header handling leads to denial service
    cvelistv5