Lucene search

K
hackeroneW0x42H1:2442613
HistoryMar 31, 2024 - 8:25 p.m.

Internet Bug Bounty: CVE-2024-2398: HTTP/2 push headers memory-leak

2024-03-3120:25:17
w0x42
hackerone.com
$2580
74
memory leak
libcurl
http/2
denial of service
bug bounty

6.9 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

10.4%

A memory leak was found in libcurl in handling HTTP/2 push headers, which could lead to a denial of service due to memory exhaustion.
Original report: https://hackerone.com/reports/2402845

Impact

denial of service