PT-2024-31778

CVE-2024-45797

·

Published

2024-10-16

·

Updated

2025-11-07

Description by

CVSS 3.1
7.5
High
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions: LibHTP versions prior to 0.5.49
Description: The issue concerns unbounded processing of HTTP request and response headers, which can lead to excessive CPU time and memory utilization, resulting in extreme slowdowns. This is a problem with the LibHTP parser, which focuses on security for the HTTP protocol.
Recommendations: For versions prior to 0.5.49, update to version 0.5.49 to address the issue of excessive CPU usage due to unbounded processing of HTTP headers.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Related identifiers
GHSA-RQQP-24CH-248F
ALT-PU-2025-14099
DLA-4295-1
OPENSUSE-SU-2025:15394-1
USN-7814-1
Found an issue in the description? Have something to add? Feel free to write us 👾