Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2024-28871

Опубликовано: 04 апр. 2024
Источник: ubuntu
Приоритет: medium
CVSS3: 7.5

Описание

LibHTP is a security-aware parser for the HTTP protocol and the related bits and pieces. Version 0.5.46 may parse malformed request traffic, leading to excessive CPU usage. Version 0.5.47 contains a patch for the issue. No known workarounds are available.

РелизСтатусПримечание
devel

not-affected

1:0.5.50-1
esm-apps/bionic

not-affected

code not present
esm-apps/focal

released

1:0.5.32-1ubuntu0.1~esm1
esm-apps/jammy

released

1:0.5.39-1ubuntu0.1~esm1
esm-apps/noble

released

1:0.5.46-1ubuntu2+esm1
esm-apps/xenial

not-affected

code not present
focal

ignored

end of standard support, was needs-triage
jammy

needed

mantic

ignored

end of life, was needs-triage
noble

needed

Показывать по

7.5 High

CVSS3

Связанные уязвимости

CVSS3: 7.5
nvd
почти 2 года назад

LibHTP is a security-aware parser for the HTTP protocol and the related bits and pieces. Version 0.5.46 may parse malformed request traffic, leading to excessive CPU usage. Version 0.5.47 contains a patch for the issue. No known workarounds are available.

CVSS3: 7.5
debian
почти 2 года назад

LibHTP is a security-aware parser for the HTTP protocol and the relate ...

CVSS3: 7.5
fstec
почти 2 года назад

Уязвимость библиотеки LibHTP, связанная с неограниченным распределением ресурсов, позволяющая нарушителю вызвать отказ в обслуживании

7.5 High

CVSS3