Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

openSUSE-SU-2024:0150-1

Опубликовано: 04 июн. 2024
Источник: suse-cvrf

Описание

Security update for libhtp

This update for libhtp fixes the following issues:

  • CVE-2024-23837: excessive processing time of HTTP headers can lead to denial of service (boo#1220403)

Список пакетов

SUSE Package Hub 15 SP5
libhtp-devel-0.5.42-bp156.3.3.1
libhtp2-0.5.42-bp156.3.3.1
SUSE Package Hub 15 SP6
libhtp-devel-0.5.42-bp156.3.3.1
libhtp2-0.5.42-bp156.3.3.1
openSUSE Leap 15.5
libhtp-devel-0.5.42-bp156.3.3.1
libhtp2-0.5.42-bp156.3.3.1
openSUSE Leap 15.6
libhtp-devel-0.5.42-bp156.3.3.1
libhtp2-0.5.42-bp156.3.3.1

Ссылки

Описание

LibHTP is a security-aware parser for the HTTP protocol. Crafted traffic can cause excessive processing time of HTTP headers, leading to denial of service. This issue is addressed in 0.5.46.

Затронутые продукты
SUSE Package Hub 15 SP5:libhtp-devel-0.5.42-bp156.3.3.1
SUSE Package Hub 15 SP5:libhtp2-0.5.42-bp156.3.3.1
SUSE Package Hub 15 SP6:libhtp-devel-0.5.42-bp156.3.3.1
SUSE Package Hub 15 SP6:libhtp2-0.5.42-bp156.3.3.1
Ссылки
Уязвимость openSUSE-SU-2024:0150-1