Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2026-54399

Опубликовано: 01 июл. 2026
Источник: nvd
CVSS3: 7.5
EPSS Низкий

Описание

Uncontrolled Resource Consumption vulnerability in the HTTP/1.1 message parser in Apache HttpComponents Core (5.4.2 and earlier, 5.5-beta1 and earlier) allows an remote attacker to cause a denial of service through memory exhaustion by sending messages with excessive number of headers / excessive header length

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:apache:httpcomponents_core:*:*:*:*:*:*:*:*
Версия от 5.0 (включая) до 5.4.2 (включая)
cpe:2.3:a:apache:httpcomponents_core:5.5:alpha1:*:*:*:*:*:*
cpe:2.3:a:apache:httpcomponents_core:5.5:beta1:*:*:*:*:*:*

EPSS

Процентиль: 44%
0.00565
Низкий

7.5 High

CVSS3

Дефекты

CWE-400
NVD-CWE-noinfo

Связанные уязвимости

CVSS3: 7.5
ubuntu
около 1 месяца назад

Uncontrolled Resource Consumption vulnerability in the HTTP/1.1 message parser in Apache HttpComponents Core (5.4.2 and earlier, 5.5-beta1 and earlier) allows an remote attacker to cause a denial of service through memory exhaustion by sending messages with excessive number of headers / excessive header length

CVSS3: 7.5
redhat
около 1 месяца назад

Uncontrolled Resource Consumption vulnerability in the HTTP/1.1 message parser in Apache HttpComponents Core (5.4.2 and earlier, 5.5-beta1 and earlier) allows an remote attacker to cause a denial of service through memory exhaustion by sending messages with excessive number of headers / excessive header length

CVSS3: 7.5
debian
около 1 месяца назад

Uncontrolled Resource Consumption vulnerability in the HTTP/1.1 messag ...

CVSS3: 7.5
github
около 1 месяца назад

Uncontrolled Resource Consumption vulnerability in the HTTP/1.1 message parser in Apache HttpComponents Core (5.4.2 and earlier, 5.5-beta1 and earlier) allows an remote attacker to cause a denial of service through memory exhaustion by sending messages with excessive number of headers / excessive header length

EPSS

Процентиль: 44%
0.00565
Низкий

7.5 High

CVSS3

Дефекты

CWE-400
NVD-CWE-noinfo