Lucene search

INCIBECVE-2024-5055

HistoryMay 17, 2024 - 12:15 p.m.

CVE-2024-5055

2024-05-1712:15:18

CWE-400

INCIBE

web.nvd.nist.gov

cve-2024-5055

xampp

windows

resource consumption

vulnerability

nvd

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

6.8

Confidence

Low

EPSS

Percentile

9.0%

JSON

Uncontrolled resource consumption vulnerability in XAMPP Windows, versions 7.3.2 and earlier. This vulnerability exists when XAMPP attempts to process many incomplete HTTP requests, resulting in resource consumption and system crashes.

Affected configurations

Vulners

Vulnrichment

Node

apache_friendsxamppRange≤7.3.2

VendorProductVersionCPE
apache_friendsxampp*cpe:2.3:a:apache_friends:xampp:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
apache_friends	xampp	*	cpe:2.3:a:apache_friends:xampp::::::::

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "XAMPP",
    "vendor": "Apache Friends",
    "versions": [
      {
        "status": "affected",
        "version": "7.3.2"
      }
    ]
  }
]

References

www.incibe.es/en/incibe-cert/notices/aviso/vulnerability-uncontrolled-resource-consumption-xampp

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

6.8

Confidence

Low

EPSS

Percentile

9.0%

JSON

Related for CVE-2024-5055