Search

Find a vulnerability

Search criteria

    4 vulnerabilities found for libhtp by oisf

    CVE-2025-53537 (GCVE-0-2025-53537)

    Vulnerability from cvelistv5 – Published: 2025-07-23 20:35 – Updated: 2025-07-23 20:48
    VLAI
    Title
    LibHTP's memory leak with lzma can lead to resource starvation
    Summary
    LibHTP is a security-aware parser for the HTTP protocol and its related bits and pieces. In versions 0.5.50 and below, there is a traffic-induced memory leak that can starve the process of memory, leading to loss of visibility. To workaround this issue, set `suricata.yaml app-layer.protocols.http.libhtp.default-config.lzma-enabled` to false. This issue is fixed in version 0.5.51.
    SSVC
    Exploitation: none Automatable: yes Technical Impact: partial
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2025-07-23 20:48 UTC
    CWE
    • CWE-401 - Missing Release of Memory after Effective Lifetime
    Assigner
    GitHub_M CNA
    References
    Impacted products
    Vendor Product Version
    OISF libhtp Affected: < 0.5.51
    Create a notification for this product.
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2025-53537",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "yes"
                      },
                      {
                        "Technical Impact": "partial"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2025-07-23T20:48:53.174658Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2025-07-23T20:48:59.864Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "libhtp",
              "vendor": "OISF",
              "versions": [
                {
                  "status": "affected",
                  "version": "\u003c 0.5.51"
                }
              ]
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "value": "LibHTP is a security-aware parser for the HTTP protocol and its related bits and pieces. In versions 0.5.50 and below, there is a traffic-induced memory leak that can starve the process of memory, leading to loss of visibility. To workaround this issue, set `suricata.yaml app-layer.protocols.http.libhtp.default-config.lzma-enabled` to false. This issue is fixed in version 0.5.51."
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "HIGH",
                "baseScore": 7.5,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "NONE",
                "integrityImpact": "NONE",
                "privilegesRequired": "NONE",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                "version": "3.1"
              }
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-401",
                  "description": "CWE-401: Missing Release of Memory after Effective Lifetime",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2025-07-23T20:35:30.824Z",
            "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
            "shortName": "GitHub_M"
          },
          "references": [
            {
              "name": "https://github.com/OISF/libhtp/security/advisories/GHSA-v3qq-h8mh-vph7",
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "https://github.com/OISF/libhtp/security/advisories/GHSA-v3qq-h8mh-vph7"
            },
            {
              "name": "https://github.com/OISF/libhtp/commit/9037ea35110a0d97be5cedf8d31fb4cd9a38c7a7",
              "tags": [
                "x_refsource_MISC"
              ],
              "url": "https://github.com/OISF/libhtp/commit/9037ea35110a0d97be5cedf8d31fb4cd9a38c7a7"
            }
          ],
          "source": {
            "advisory": "GHSA-v3qq-h8mh-vph7",
            "discovery": "UNKNOWN"
          },
          "title": "LibHTP\u0027s memory leak with lzma can lead to resource starvation"
        }
      },
      "cveMetadata": {
        "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "assignerShortName": "GitHub_M",
        "cveId": "CVE-2025-53537",
        "datePublished": "2025-07-23T20:35:30.824Z",
        "dateReserved": "2025-07-02T15:15:11.515Z",
        "dateUpdated": "2025-07-23T20:48:59.864Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }

    CVE-2024-45797 (GCVE-0-2024-45797)

    Vulnerability from cvelistv5 – Published: 2024-10-16 18:45 – Updated: 2025-11-03 18:08
    VLAI
    Title
    LibHTP's unbounded header handling leads to denial service
    Summary
    LibHTP is a security-aware parser for the HTTP protocol and the related bits and pieces. Prior to version 0.5.49, unbounded processing of HTTP request and response headers can lead to excessive CPU time and memory utilization, possibly leading to extreme slowdowns. This issue is addressed in 0.5.49.
    SSVC
    Exploitation: none Automatable: yes Technical Impact: partial
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2024-10-17 17:16 UTC
    CWE
    • CWE-770 - Allocation of Resources Without Limits or Throttling
    Assigner
    GitHub_M CNA
    Impacted products
    Vendor Product Version
    OISF libhtp Affected: < 0.5.49
    Create a notification for this product.
    oisf libhtp Affected: 0 , < 0.5.49 (custom)
        cpe:2.3:a:oisf:libhtp:*:*:*:*:*:*:*:*
    Create a notification for this product.
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "affected": [
              {
                "cpes": [
                  "cpe:2.3:a:oisf:libhtp:*:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "libhtp",
                "vendor": "oisf",
                "versions": [
                  {
                    "lessThan": "0.5.49",
                    "status": "affected",
                    "version": "0",
                    "versionType": "custom"
                  }
                ]
              }
            ],
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2024-45797",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "yes"
                      },
                      {
                        "Technical Impact": "partial"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2024-10-17T17:16:13.655715Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2024-10-17T17:16:46.073Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          },
          {
            "providerMetadata": {
              "dateUpdated": "2025-11-03T18:08:22.690Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "url": "https://lists.debian.org/debian-lts-announce/2025/09/msg00009.html"
              }
            ],
            "title": "CVE Program Container"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "libhtp",
              "vendor": "OISF",
              "versions": [
                {
                  "status": "affected",
                  "version": "\u003c 0.5.49"
                }
              ]
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "value": "LibHTP is a security-aware parser for the HTTP protocol and the related bits and pieces. Prior to version 0.5.49, unbounded processing of HTTP request and response headers can lead to excessive CPU time and memory utilization, possibly leading to extreme slowdowns. This issue is addressed in 0.5.49."
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "HIGH",
                "baseScore": 7.5,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "NONE",
                "integrityImpact": "NONE",
                "privilegesRequired": "NONE",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                "version": "3.1"
              }
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-770",
                  "description": "CWE-770: Allocation of Resources Without Limits or Throttling",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2024-10-16T18:45:08.000Z",
            "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
            "shortName": "GitHub_M"
          },
          "references": [
            {
              "name": "https://github.com/OISF/libhtp/security/advisories/GHSA-rqqp-24ch-248f",
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "https://github.com/OISF/libhtp/security/advisories/GHSA-rqqp-24ch-248f"
            },
            {
              "name": "https://redmine.openinfosecfoundation.org/issues/7191",
              "tags": [
                "x_refsource_MISC"
              ],
              "url": "https://redmine.openinfosecfoundation.org/issues/7191"
            }
          ],
          "source": {
            "advisory": "GHSA-rqqp-24ch-248f",
            "discovery": "UNKNOWN"
          },
          "title": "LibHTP\u0027s unbounded header handling leads to denial service"
        }
      },
      "cveMetadata": {
        "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "assignerShortName": "GitHub_M",
        "cveId": "CVE-2024-45797",
        "datePublished": "2024-10-16T18:45:08.000Z",
        "dateReserved": "2024-09-09T14:23:07.503Z",
        "dateUpdated": "2025-11-03T18:08:22.690Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2024-28871 (GCVE-0-2024-28871)

    Vulnerability from cvelistv5 – Published: 2024-04-04 14:46 – Updated: 2024-08-26 20:45
    VLAI
    Title
    Excessive CPU used on malformed traffic
    Summary
    LibHTP is a security-aware parser for the HTTP protocol and the related bits and pieces. Version 0.5.46 may parse malformed request traffic, leading to excessive CPU usage. Version 0.5.47 contains a patch for the issue. No known workarounds are available.
    SSVC
    Exploitation: none Automatable: yes Technical Impact: partial
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2024-04-04 15:49 UTC
    CWE
    • CWE-770 - Allocation of Resources Without Limits or Throttling
    Assigner
    GitHub_M CNA
    Impacted products
    Vendor Product Version
    OISF libhtp Affected: = 0.5.46
    Create a notification for this product.
    oisf libhtp Affected: 0.5.46
        cpe:2.3:a:oisf:libhtp:*:*:*:*:*:*:*:*
    Create a notification for this product.
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-02T00:56:58.322Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "name": "https://github.com/OISF/libhtp/security/advisories/GHSA-ffr2-45w9-7wmg",
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "https://github.com/OISF/libhtp/security/advisories/GHSA-ffr2-45w9-7wmg"
              },
              {
                "name": "https://github.com/OISF/libhtp/commit/79e713f3e527593a45f545e854cd9e6fbb3cd3ed",
                "tags": [
                  "x_refsource_MISC",
                  "x_transferred"
                ],
                "url": "https://github.com/OISF/libhtp/commit/79e713f3e527593a45f545e854cd9e6fbb3cd3ed"
              },
              {
                "name": "https://github.com/OISF/libhtp/commit/bf618ec7f243cebfb0f7e84c3cb158955cb32b4d",
                "tags": [
                  "x_refsource_MISC",
                  "x_transferred"
                ],
                "url": "https://github.com/OISF/libhtp/commit/bf618ec7f243cebfb0f7e84c3cb158955cb32b4d"
              },
              {
                "name": "https://redmine.openinfosecfoundation.org/issues/6757",
                "tags": [
                  "x_refsource_MISC",
                  "x_transferred"
                ],
                "url": "https://redmine.openinfosecfoundation.org/issues/6757"
              }
            ],
            "title": "CVE Program Container"
          },
          {
            "affected": [
              {
                "cpes": [
                  "cpe:2.3:a:oisf:libhtp:*:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "libhtp",
                "vendor": "oisf",
                "versions": [
                  {
                    "status": "affected",
                    "version": "0.5.46"
                  }
                ]
              }
            ],
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2024-28871",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "yes"
                      },
                      {
                        "Technical Impact": "partial"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2024-04-04T15:49:46.678225Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2024-08-26T20:45:59.274Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "libhtp",
              "vendor": "OISF",
              "versions": [
                {
                  "status": "affected",
                  "version": "= 0.5.46"
                }
              ]
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "value": "LibHTP is a security-aware parser for the HTTP protocol and the related bits and pieces. Version 0.5.46 may parse malformed request traffic, leading to excessive CPU usage. Version 0.5.47 contains a patch for the issue. No known workarounds are available."
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "HIGH",
                "baseScore": 7.5,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "NONE",
                "integrityImpact": "NONE",
                "privilegesRequired": "NONE",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                "version": "3.1"
              }
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-770",
                  "description": "CWE-770: Allocation of Resources Without Limits or Throttling",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2024-04-04T14:46:02.803Z",
            "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
            "shortName": "GitHub_M"
          },
          "references": [
            {
              "name": "https://github.com/OISF/libhtp/security/advisories/GHSA-ffr2-45w9-7wmg",
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "https://github.com/OISF/libhtp/security/advisories/GHSA-ffr2-45w9-7wmg"
            },
            {
              "name": "https://github.com/OISF/libhtp/commit/79e713f3e527593a45f545e854cd9e6fbb3cd3ed",
              "tags": [
                "x_refsource_MISC"
              ],
              "url": "https://github.com/OISF/libhtp/commit/79e713f3e527593a45f545e854cd9e6fbb3cd3ed"
            },
            {
              "name": "https://github.com/OISF/libhtp/commit/bf618ec7f243cebfb0f7e84c3cb158955cb32b4d",
              "tags": [
                "x_refsource_MISC"
              ],
              "url": "https://github.com/OISF/libhtp/commit/bf618ec7f243cebfb0f7e84c3cb158955cb32b4d"
            },
            {
              "name": "https://redmine.openinfosecfoundation.org/issues/6757",
              "tags": [
                "x_refsource_MISC"
              ],
              "url": "https://redmine.openinfosecfoundation.org/issues/6757"
            }
          ],
          "source": {
            "advisory": "GHSA-ffr2-45w9-7wmg",
            "discovery": "UNKNOWN"
          },
          "title": "Excessive CPU used on malformed traffic"
        }
      },
      "cveMetadata": {
        "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "assignerShortName": "GitHub_M",
        "cveId": "CVE-2024-28871",
        "datePublished": "2024-04-04T14:46:02.803Z",
        "dateReserved": "2024-03-11T22:45:07.688Z",
        "dateUpdated": "2024-08-26T20:45:59.274Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }

    CVE-2024-23837 (GCVE-0-2024-23837)

    Vulnerability from cvelistv5 – Published: 2024-02-26 16:17 – Updated: 2025-11-03 18:08
    VLAI
    Title
    LibHTP unbounded folded header handling leads to denial service
    Summary
    LibHTP is a security-aware parser for the HTTP protocol. Crafted traffic can cause excessive processing time of HTTP headers, leading to denial of service. This issue is addressed in 0.5.46.
    SSVC
    Exploitation: none Automatable: yes Technical Impact: partial
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2024-08-12 14:54 UTC
    CWE
    • CWE-770 - Allocation of Resources Without Limits or Throttling
    Assigner
    GitHub_M CNA
    Impacted products
    Vendor Product Version
    OISF libhtp Affected: < 0.5.46
    Create a notification for this product.
    oisf libhtp Affected: 0 , < 0.5.46 (custom)
        cpe:2.3:a:oisf:libhtp:*:*:*:*:*:*:*:*
    Create a notification for this product.
    fedoraproject fedora Affected: 38
        cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*
    Create a notification for this product.
    fedoraproject fedora Affected: 39
        cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:*
    Create a notification for this product.
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2025-11-03T18:08:14.608Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "name": "https://github.com/OISF/libhtp/security/advisories/GHSA-f9wf-rrjj-qx8m",
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "https://github.com/OISF/libhtp/security/advisories/GHSA-f9wf-rrjj-qx8m"
              },
              {
                "name": "https://github.com/OISF/libhtp/commit/20ac301d801cdf01b3f021cca08a22a87f477c4a",
                "tags": [
                  "x_refsource_MISC",
                  "x_transferred"
                ],
                "url": "https://github.com/OISF/libhtp/commit/20ac301d801cdf01b3f021cca08a22a87f477c4a"
              },
              {
                "name": "https://redmine.openinfosecfoundation.org/issues/6444",
                "tags": [
                  "x_refsource_MISC",
                  "x_transferred"
                ],
                "url": "https://redmine.openinfosecfoundation.org/issues/6444"
              },
              {
                "tags": [
                  "x_transferred"
                ],
                "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GOCOBFUTIFHOP2PZOH4ENRFXRBHIRKK4/"
              },
              {
                "tags": [
                  "x_transferred"
                ],
                "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZXJIT7R53ZXROO3I256RFUWTIW4ECK6P/"
              },
              {
                "url": "https://lists.debian.org/debian-lts-announce/2025/09/msg00009.html"
              }
            ],
            "title": "CVE Program Container"
          },
          {
            "affected": [
              {
                "cpes": [
                  "cpe:2.3:a:oisf:libhtp:*:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "libhtp",
                "vendor": "oisf",
                "versions": [
                  {
                    "lessThan": "0.5.46",
                    "status": "affected",
                    "version": "0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "fedora",
                "vendor": "fedoraproject",
                "versions": [
                  {
                    "status": "affected",
                    "version": "38"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "fedora",
                "vendor": "fedoraproject",
                "versions": [
                  {
                    "status": "affected",
                    "version": "39"
                  }
                ]
              }
            ],
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2024-23837",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "yes"
                      },
                      {
                        "Technical Impact": "partial"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2024-08-12T14:54:41.216991Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2024-08-12T14:57:03.079Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "libhtp",
              "vendor": "OISF",
              "versions": [
                {
                  "status": "affected",
                  "version": "\u003c 0.5.46"
                }
              ]
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "value": "LibHTP is a security-aware parser for the HTTP protocol. Crafted traffic can cause excessive processing time of HTTP headers, leading to denial of service. This issue is addressed in 0.5.46."
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "HIGH",
                "baseScore": 7.5,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "NONE",
                "integrityImpact": "NONE",
                "privilegesRequired": "NONE",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                "version": "3.1"
              }
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-770",
                  "description": "CWE-770: Allocation of Resources Without Limits or Throttling",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2024-03-07T03:06:21.855Z",
            "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
            "shortName": "GitHub_M"
          },
          "references": [
            {
              "name": "https://github.com/OISF/libhtp/security/advisories/GHSA-f9wf-rrjj-qx8m",
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "https://github.com/OISF/libhtp/security/advisories/GHSA-f9wf-rrjj-qx8m"
            },
            {
              "name": "https://github.com/OISF/libhtp/commit/20ac301d801cdf01b3f021cca08a22a87f477c4a",
              "tags": [
                "x_refsource_MISC"
              ],
              "url": "https://github.com/OISF/libhtp/commit/20ac301d801cdf01b3f021cca08a22a87f477c4a"
            },
            {
              "name": "https://redmine.openinfosecfoundation.org/issues/6444",
              "tags": [
                "x_refsource_MISC"
              ],
              "url": "https://redmine.openinfosecfoundation.org/issues/6444"
            },
            {
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GOCOBFUTIFHOP2PZOH4ENRFXRBHIRKK4/"
            },
            {
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZXJIT7R53ZXROO3I256RFUWTIW4ECK6P/"
            }
          ],
          "source": {
            "advisory": "GHSA-f9wf-rrjj-qx8m",
            "discovery": "UNKNOWN"
          },
          "title": "LibHTP unbounded folded header handling leads to denial service"
        }
      },
      "cveMetadata": {
        "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "assignerShortName": "GitHub_M",
        "cveId": "CVE-2024-23837",
        "datePublished": "2024-02-26T16:17:24.372Z",
        "dateReserved": "2024-01-22T22:23:54.340Z",
        "dateUpdated": "2025-11-03T18:08:14.608Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }