Логотип exploitDog
bind:"CVE-2024-24791" OR bind:"CVE-2024-24788"
Консоль
Логотип exploitDog

exploitDog

bind:"CVE-2024-24791" OR bind:"CVE-2024-24788"

Количество 50

Количество 50

oracle-oval логотип

ELSA-2024-9089

11 месяцев назад

ELSA-2024-9089: containernetworking-plugins security update (MODERATE)

EPSS: Низкий
rocky логотип

RLSA-2024:9135

7 месяцев назад

Moderate: toolbox security update

EPSS: Низкий
oracle-oval логотип

ELSA-2024-9098

11 месяцев назад

ELSA-2024-9098: skopeo security update (MODERATE)

EPSS: Низкий
oracle-oval логотип

ELSA-2024-9115

11 месяцев назад

ELSA-2024-9115: grafana security update (MODERATE)

EPSS: Низкий
oracle-oval логотип

ELSA-2024-6969

около 1 года назад

ELSA-2024-6969: container-tools:ol8 security update (MODERATE)

EPSS: Низкий
oracle-oval логотип

ELSA-2025-7256

5 месяцев назад

ELSA-2025-7256: git-lfs security update (MODERATE)

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2024:3938-1

12 месяцев назад

Security update for go1.22-openssl

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2024:3772-1

12 месяцев назад

Security update for go1.22-openssl

EPSS: Низкий
ubuntu логотип

CVE-2024-24788

больше 1 года назад

A malformed DNS message in response to a query can cause the Lookup functions to get stuck in an infinite loop.

CVSS3: 5.9
EPSS: Низкий
redhat логотип

CVE-2024-24788

больше 1 года назад

A malformed DNS message in response to a query can cause the Lookup functions to get stuck in an infinite loop.

CVSS3: 7.5
EPSS: Низкий
nvd логотип

CVE-2024-24788

больше 1 года назад

A malformed DNS message in response to a query can cause the Lookup functions to get stuck in an infinite loop.

CVSS3: 5.9
EPSS: Низкий
msrc логотип

CVE-2024-24788

около 2 месяцев назад

Malformed DNS message can cause infinite loop in net

CVSS3: 5.9
EPSS: Низкий
debian логотип

CVE-2024-24788

больше 1 года назад

A malformed DNS message in response to a query can cause the Lookup fu ...

CVSS3: 5.9
EPSS: Низкий
ubuntu логотип

CVE-2024-24791

больше 1 года назад

The net/http HTTP/1.1 client mishandled the case where a server responds to a request with an "Expect: 100-continue" header with a non-informational (200 or higher) status. This mishandling could leave a client connection in an invalid state, where the next request sent on the connection will fail. An attacker sending a request to a net/http/httputil.ReverseProxy proxy can exploit this mishandling to cause a denial of service by sending "Expect: 100-continue" requests which elicit a non-informational response from the backend. Each such request leaves the proxy with an invalid connection, and causes one subsequent request using that connection to fail.

CVSS3: 7.5
EPSS: Низкий
redhat логотип

CVE-2024-24791

больше 1 года назад

The net/http HTTP/1.1 client mishandled the case where a server responds to a request with an "Expect: 100-continue" header with a non-informational (200 or higher) status. This mishandling could leave a client connection in an invalid state, where the next request sent on the connection will fail. An attacker sending a request to a net/http/httputil.ReverseProxy proxy can exploit this mishandling to cause a denial of service by sending "Expect: 100-continue" requests which elicit a non-informational response from the backend. Each such request leaves the proxy with an invalid connection, and causes one subsequent request using that connection to fail.

CVSS3: 5.9
EPSS: Низкий
nvd логотип

CVE-2024-24791

больше 1 года назад

The net/http HTTP/1.1 client mishandled the case where a server responds to a request with an "Expect: 100-continue" header with a non-informational (200 or higher) status. This mishandling could leave a client connection in an invalid state, where the next request sent on the connection will fail. An attacker sending a request to a net/http/httputil.ReverseProxy proxy can exploit this mishandling to cause a denial of service by sending "Expect: 100-continue" requests which elicit a non-informational response from the backend. Each such request leaves the proxy with an invalid connection, and causes one subsequent request using that connection to fail.

CVSS3: 7.5
EPSS: Низкий
msrc логотип

CVE-2024-24791

около 2 месяцев назад

Denial of service due to improper 100-continue handling in net/http

CVSS3: 7.5
EPSS: Низкий
debian логотип

CVE-2024-24791

больше 1 года назад

The net/http HTTP/1.1 client mishandled the case where a server respon ...

CVSS3: 7.5
EPSS: Низкий
redos логотип

ROS-20240918-05

около 1 года назад

Уязвимость consul

CVSS3: 6.5
EPSS: Низкий
rocky логотип

RLSA-2024:9277

7 месяцев назад

Moderate: oci-seccomp-bpf-hook security update

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
oracle-oval логотип
ELSA-2024-9089

ELSA-2024-9089: containernetworking-plugins security update (MODERATE)

11 месяцев назад
rocky логотип
RLSA-2024:9135

Moderate: toolbox security update

7 месяцев назад
oracle-oval логотип
ELSA-2024-9098

ELSA-2024-9098: skopeo security update (MODERATE)

11 месяцев назад
oracle-oval логотип
ELSA-2024-9115

ELSA-2024-9115: grafana security update (MODERATE)

11 месяцев назад
oracle-oval логотип
ELSA-2024-6969

ELSA-2024-6969: container-tools:ol8 security update (MODERATE)

около 1 года назад
oracle-oval логотип
ELSA-2025-7256

ELSA-2025-7256: git-lfs security update (MODERATE)

5 месяцев назад
suse-cvrf логотип
SUSE-SU-2024:3938-1

Security update for go1.22-openssl

12 месяцев назад
suse-cvrf логотип
SUSE-SU-2024:3772-1

Security update for go1.22-openssl

12 месяцев назад
ubuntu логотип
CVE-2024-24788

A malformed DNS message in response to a query can cause the Lookup functions to get stuck in an infinite loop.

CVSS3: 5.9
0%
Низкий
больше 1 года назад
redhat логотип
CVE-2024-24788

A malformed DNS message in response to a query can cause the Lookup functions to get stuck in an infinite loop.

CVSS3: 7.5
0%
Низкий
больше 1 года назад
nvd логотип
CVE-2024-24788

A malformed DNS message in response to a query can cause the Lookup functions to get stuck in an infinite loop.

CVSS3: 5.9
0%
Низкий
больше 1 года назад
msrc логотип
CVE-2024-24788

Malformed DNS message can cause infinite loop in net

CVSS3: 5.9
0%
Низкий
около 2 месяцев назад
debian логотип
CVE-2024-24788

A malformed DNS message in response to a query can cause the Lookup fu ...

CVSS3: 5.9
0%
Низкий
больше 1 года назад
ubuntu логотип
CVE-2024-24791

The net/http HTTP/1.1 client mishandled the case where a server responds to a request with an "Expect: 100-continue" header with a non-informational (200 or higher) status. This mishandling could leave a client connection in an invalid state, where the next request sent on the connection will fail. An attacker sending a request to a net/http/httputil.ReverseProxy proxy can exploit this mishandling to cause a denial of service by sending "Expect: 100-continue" requests which elicit a non-informational response from the backend. Each such request leaves the proxy with an invalid connection, and causes one subsequent request using that connection to fail.

CVSS3: 7.5
1%
Низкий
больше 1 года назад
redhat логотип
CVE-2024-24791

The net/http HTTP/1.1 client mishandled the case where a server responds to a request with an "Expect: 100-continue" header with a non-informational (200 or higher) status. This mishandling could leave a client connection in an invalid state, where the next request sent on the connection will fail. An attacker sending a request to a net/http/httputil.ReverseProxy proxy can exploit this mishandling to cause a denial of service by sending "Expect: 100-continue" requests which elicit a non-informational response from the backend. Each such request leaves the proxy with an invalid connection, and causes one subsequent request using that connection to fail.

CVSS3: 5.9
1%
Низкий
больше 1 года назад
nvd логотип
CVE-2024-24791

The net/http HTTP/1.1 client mishandled the case where a server responds to a request with an "Expect: 100-continue" header with a non-informational (200 or higher) status. This mishandling could leave a client connection in an invalid state, where the next request sent on the connection will fail. An attacker sending a request to a net/http/httputil.ReverseProxy proxy can exploit this mishandling to cause a denial of service by sending "Expect: 100-continue" requests which elicit a non-informational response from the backend. Each such request leaves the proxy with an invalid connection, and causes one subsequent request using that connection to fail.

CVSS3: 7.5
1%
Низкий
больше 1 года назад
msrc логотип
CVE-2024-24791

Denial of service due to improper 100-continue handling in net/http

CVSS3: 7.5
1%
Низкий
около 2 месяцев назад
debian логотип
CVE-2024-24791

The net/http HTTP/1.1 client mishandled the case where a server respon ...

CVSS3: 7.5
1%
Низкий
больше 1 года назад
redos логотип
ROS-20240918-05

Уязвимость consul

CVSS3: 6.5
0%
Низкий
около 1 года назад
rocky логотип
RLSA-2024:9277

Moderate: oci-seccomp-bpf-hook security update

0%
Низкий
7 месяцев назад

Уязвимостей на страницу