Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2024-45797

Опубликовано: 16 окт. 2024
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS3: 7.5

Описание

LibHTP is a security-aware parser for the HTTP protocol and the related bits and pieces. Prior to version 0.5.49, unbounded processing of HTTP request and response headers can lead to excessive CPU time and memory utilization, possibly leading to extreme slowdowns. This issue is addressed in 0.5.49.

РелизСтатусПримечание
devel

DNE

esm-apps-legacy/xenial

released

0.5.15-1ubuntu0.1~esm1
esm-apps/bionic

released

1:0.5.26-1ubuntu0.1~esm1
esm-apps/focal

released

1:0.5.32-1ubuntu0.1~esm1
esm-apps/jammy

released

1:0.5.39-1ubuntu0.1~esm1
esm-apps/noble

released

1:0.5.46-1ubuntu2+esm1
esm-apps/resolute

not-affected

1:0.5.50-1
esm-apps/xenial

released

0.5.15-1ubuntu0.1~esm1
focal

ignored

end of standard support, was needs-triage
jammy

needed

Показывать по

EPSS

Процентиль: 55%
0.00735
Низкий

7.5 High

CVSS3

Связанные уязвимости

CVSS3: 7.5
nvd
около 2 лет назад

LibHTP is a security-aware parser for the HTTP protocol and the related bits and pieces. Prior to version 0.5.49, unbounded processing of HTTP request and response headers can lead to excessive CPU time and memory utilization, possibly leading to extreme slowdowns. This issue is addressed in 0.5.49.

CVSS3: 7.5
debian
около 2 лет назад

LibHTP is a security-aware parser for the HTTP protocol and the relate ...

CVSS3: 7.5
altlinux
8 месяцев назад

ALT-PU-2026-4779: package `libhtp` update to version 0.5.51-alt1

CVSS3: 9.8
altlinux
около 1 года назад

ALT-PU-2025-14099: package `suricata` update to version 8.0.2-alt1

CVSS3: 9.8
altlinux
8 месяцев назад

ALT-PU-2026-4777: package `suricata` update to version 8.0.4-alt1

EPSS

Процентиль: 55%
0.00735
Низкий

7.5 High

CVSS3