7.5

CVE-2024-45797

Exploit

LibHTP's unbounded header handling leads to denial service

LibHTP is a security-aware parser for the HTTP protocol and the related bits and pieces. Prior to version 0.5.49, unbounded processing of HTTP request and response headers can lead to excessive CPU time and memory utilization, possibly leading to extreme slowdowns. This issue is addressed in 0.5.49.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Oisf ≫ Libhtp Version < 0.5.49
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.71% 0.484
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
security-advisories@github.com 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-770 Allocation of Resources Without Limits or Throttling

The product allocates a reusable resource or group of resources on behalf of an actor without imposing any intended restrictions on the size or number of resources that can be allocated.

https://github.com/OISF/libhtp/security/advisories/GHSA-rqqp-24ch-248f
Patch
Vendor Advisory
Exploit
Issue Tracking
https://redmine.openinfosecfoundation.org/issues/7191
Patch
Vendor Advisory
Exploit
Issue Tracking
https://lists.debian.org/debian-lts-announce/2025/09/msg00009.html