CVE-2024-23837

  1. Yack CVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-23837

7.5 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

L

ibHTP is a security-aware parser for the HTTP protocol. Crafted traffic can cause excessive processing time of HTTP headers, leading to denial of service. This issue is addressed in 0.5.46.

References
Link Resource
https://github.com/OISF/libhtp/commit/20ac301d801cdf01b3f021cca08a22a87f477c4a Patch
https://github.com/OISF/libhtp/security/advisories/GHSA-f9wf-rrjj-qx8m Vendor Advisory
https://lists.fedoraproject.org/archives/list/[email protected]/message/GOCOBFUTIFHOP2PZOH4ENRFXRBHIRKK4/ Mailing List
https://lists.fedoraproject.org/archives/list/[email protected]/message/ZXJIT7R53ZXROO3I256RFUWTIW4ECK6P/ Mailing List
https://redmine.openinfosecfoundation.org/issues/6444 Exploit
https://github.com/OISF/libhtp/commit/20ac301d801cdf01b3f021cca08a22a87f477c4a Patch
https://github.com/OISF/libhtp/security/advisories/GHSA-f9wf-rrjj-qx8m Vendor Advisory
https://lists.debian.org/debian-lts-announce/2025/09/msg00009.html
https://lists.fedoraproject.org/archives/list/[email protected]/message/GOCOBFUTIFHOP2PZOH4ENRFXRBHIRKK4/ Mailing List
https://lists.fedoraproject.org/archives/list/[email protected]/message/ZXJIT7R53ZXROO3I256RFUWTIW4ECK6P/ Mailing List
https://redmine.openinfosecfoundation.org/issues/6444 Exploit
Configurations

Configuration 1 (hide)

cpe:2.3:a:oisf:libhtp:*:*:*:*:*:*:*:*

Configuration 2 (hide)

OR cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:*
History

03 Nov 2025, 19:15

Type Values Removed Values Added
References
  • () https://lists.debian.org/debian-lts-announce/2025/09/msg00009.html -

07 Feb 2025, 17:35

Type Values Removed Values Added
First Time Fedoraproject
Oisf libhtp
Fedoraproject fedora
Oisf
CPE cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*
cpe:2.3:a:oisf:libhtp:*:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:*
References () https://github.com/OISF/libhtp/commit/20ac301d801cdf01b3f021cca08a22a87f477c4a - () https://github.com/OISF/libhtp/commit/20ac301d801cdf01b3f021cca08a22a87f477c4a - Patch
References () https://github.com/OISF/libhtp/security/advisories/GHSA-f9wf-rrjj-qx8m - () https://github.com/OISF/libhtp/security/advisories/GHSA-f9wf-rrjj-qx8m - Vendor Advisory
References () https://lists.fedoraproject.org/archives/list/[email protected]/message/GOCOBFUTIFHOP2PZOH4ENRFXRBHIRKK4/ - () https://lists.fedoraproject.org/archives/list/[email protected]/message/GOCOBFUTIFHOP2PZOH4ENRFXRBHIRKK4/ - Mailing List
References () https://lists.fedoraproject.org/archives/list/[email protected]/message/ZXJIT7R53ZXROO3I256RFUWTIW4ECK6P/ - () https://lists.fedoraproject.org/archives/list/[email protected]/message/ZXJIT7R53ZXROO3I256RFUWTIW4ECK6P/ - Mailing List
References () https://redmine.openinfosecfoundation.org/issues/6444 - () https://redmine.openinfosecfoundation.org/issues/6444 - Exploit

21 Nov 2024, 08:58

Type Values Removed Values Added
References () https://github.com/OISF/libhtp/commit/20ac301d801cdf01b3f021cca08a22a87f477c4a - () https://github.com/OISF/libhtp/commit/20ac301d801cdf01b3f021cca08a22a87f477c4a -
References () https://github.com/OISF/libhtp/security/advisories/GHSA-f9wf-rrjj-qx8m - () https://github.com/OISF/libhtp/security/advisories/GHSA-f9wf-rrjj-qx8m -
References () https://lists.fedoraproject.org/archives/list/[email protected]/message/GOCOBFUTIFHOP2PZOH4ENRFXRBHIRKK4/ - () https://lists.fedoraproject.org/archives/list/[email protected]/message/GOCOBFUTIFHOP2PZOH4ENRFXRBHIRKK4/ -
References () https://lists.fedoraproject.org/archives/list/[email protected]/message/ZXJIT7R53ZXROO3I256RFUWTIW4ECK6P/ - () https://lists.fedoraproject.org/archives/list/[email protected]/message/ZXJIT7R53ZXROO3I256RFUWTIW4ECK6P/ -
References () https://redmine.openinfosecfoundation.org/issues/6444 - () https://redmine.openinfosecfoundation.org/issues/6444 -
Information

Published : 2024-02-26 16:27

Updated : 2025-11-03 19:15

NVD link : CVE-2024-23837

Mitre link : CVE-2024-23837

CVE.ORG link : CVE-2024-23837

JSON object : View

Products Affected

fedoraproject

oisf

CWE
CWE-770

Allocation of Resources Without Limits or Throttling