CVE-2023-38434

Name of the Vulnerable Software and Affected Versions xHTTP version 72f812d

Description The issue is related to a double free in the close connection function in xhttp.c, which can be triggered by a malformed HTTP request method.

Recommendations For xHTTP version 72f812d, consider restricting access to the close connection function until a patch is available. As a temporary workaround, avoid using malformed HTTP request methods to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.