ΠΠΎΠ»ΠΈΡΠ΅ΡΡΠ²ΠΎ 5
ΠΠΎΠ»ΠΈΡΠ΅ΡΡΠ²ΠΎ 5
CVE-2024-2653
amphp/http will collect CONTINUATION frames in an unbounded buffer and will not check a limit until it has received the set END_HEADERS flag, resulting in an OOM crash.
CVE-2024-2653
amphp/http will collect CONTINUATION frames in an unbounded buffer and will not check a limit until it has received the set END_HEADERS flag, resulting in an OOM crash.
CVE-2024-2653
amphp/http will collect CONTINUATION frames in an unbounded buffer and ...
GHSA-qjfw-cvjf-f4fm
AMPHP Denial of Service via HTTP/2 CONTINUATION Frames
BDU:2024-02654
Π£ΡΠ·Π²ΠΈΠΌΠΎΡΡΡ Π±ΠΈΠ±Π»ΠΈΠΎΡΠ΅ΠΊΠΈ amphp/http ΠΈ HTTP-ΠΊΠ»ΠΈΠ΅Π½ΡΠ° amphp/http-client, ΠΏΠΎΠ·Π²ΠΎΠ»ΡΡΡΠ°Ρ Π½Π°ΡΡΡΠΈΡΠ΅Π»Ρ Π²ΡΠ·Π²Π°ΡΡ ΠΎΡΠΊΠ°Π· Π² ΠΎΠ±ΡΠ»ΡΠΆΠΈΠ²Π°Π½ΠΈΠΈ
Π£ΡΠ·Π²ΠΈΠΌΠΎΡΡΠ΅ΠΉ Π½Π° ΡΡΡΠ°Π½ΠΈΡΡ
Π£ΡΠ·Π²ΠΈΠΌΠΎΡΡΡ | CVSS | EPSS | ΠΠΏΡΠ±Π»ΠΈΠΊΠΎΠ²Π°Π½ΠΎ | |
|---|---|---|---|---|
CVE-2024-2653 amphp/http will collect CONTINUATION frames in an unbounded buffer and will not check a limit until it has received the set END_HEADERS flag, resulting in an OOM crash. | CVSS3: 7.5 | 83% ΠΡΡΠΎΠΊΠΈΠΉ | Π±ΠΎΠ»ΡΡΠ΅ 2 Π»Π΅Ρ Π½Π°Π·Π°Π΄ | |
CVE-2024-2653 amphp/http will collect CONTINUATION frames in an unbounded buffer and will not check a limit until it has received the set END_HEADERS flag, resulting in an OOM crash. | CVSS3: 8.2 | 83% ΠΡΡΠΎΠΊΠΈΠΉ | Π±ΠΎΠ»ΡΡΠ΅ 2 Π»Π΅Ρ Π½Π°Π·Π°Π΄ | |
CVE-2024-2653 amphp/http will collect CONTINUATION frames in an unbounded buffer and ... | CVSS3: 8.2 | 83% ΠΡΡΠΎΠΊΠΈΠΉ | Π±ΠΎΠ»ΡΡΠ΅ 2 Π»Π΅Ρ Π½Π°Π·Π°Π΄ | |
GHSA-qjfw-cvjf-f4fm AMPHP Denial of Service via HTTP/2 CONTINUATION Frames | CVSS3: 8.2 | 83% ΠΡΡΠΎΠΊΠΈΠΉ | Π±ΠΎΠ»ΡΡΠ΅ 2 Π»Π΅Ρ Π½Π°Π·Π°Π΄ | |
BDU:2024-02654 Π£ΡΠ·Π²ΠΈΠΌΠΎΡΡΡ Π±ΠΈΠ±Π»ΠΈΠΎΡΠ΅ΠΊΠΈ amphp/http ΠΈ HTTP-ΠΊΠ»ΠΈΠ΅Π½ΡΠ° amphp/http-client, ΠΏΠΎΠ·Π²ΠΎΠ»ΡΡΡΠ°Ρ Π½Π°ΡΡΡΠΈΡΠ΅Π»Ρ Π²ΡΠ·Π²Π°ΡΡ ΠΎΡΠΊΠ°Π· Π² ΠΎΠ±ΡΠ»ΡΠΆΠΈΠ²Π°Π½ΠΈΠΈ | CVSS3: 8.2 | 83% ΠΡΡΠΎΠΊΠΈΠΉ | Π±ΠΎΠ»ΡΡΠ΅ 2 Π»Π΅Ρ Π½Π°Π·Π°Π΄ |
Π£ΡΠ·Π²ΠΈΠΌΠΎΡΡΠ΅ΠΉ Π½Π° ΡΡΡΠ°Π½ΠΈΡΡ