CVE-2023-4540 DoS in lua-http library

🗓️ 05 Sep 2023 07:46:45Reported by GoogleType

osv🔗 osv.dev👁 18 Views

Improper Handling of Exceptional Conditions vulnerability in Daurnimator lua-http library allows Excessive Allocation and a denial of service (DoS) attack to be executed by sending a properly crafted request to the server

Reporter	Title	Published	Views	Family All 20
AlpineLinux	CVE-2023-4540	5 Sep 202307:46	–	alpinelinux
Circl	CVE-2023-4540	5 Sep 202312:17	–	circl
CNNVD	HTTP library for Lua security vulnerability	5 Sep 202300:00	–	cnnvd
CVE	CVE-2023-4540	5 Sep 202307:46	–	cve
Cvelist	CVE-2023-4540 DoS in lua-http library	5 Sep 202307:46	–	cvelist
Debian CVE	CVE-2023-4540	5 Sep 202307:46	–	debiancve
EUVD	EUVD-2023-54395	3 Oct 202520:07	–	euvd
Fedora	[SECURITY] Fedora 42 Update: lua-http-0.3-17.fc42	4 Jun 202502:11	–	fedora
Tenable Nessus	Fedora 43 : lua-http (2025-0db06733a2)	12 Aug 202500:00	–	nessus
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2023-4540	21 Aug 202500:00	–	nessus

Source	Link
cert	www.cert.pl/en/posts/2023/09/CVE-2023-4540/
cert	www.cert.pl/posts/2023/09/CVE-2023-4540/
github	www.github.com/CVEProject/cvelistV5/tree/main/cves/2023/4xxx/CVE-2023-4540.json
https	www.https//cert.pl/en/posts/2023/09/CVE-2023-4540/
nvd	www.nvd.nist.gov/vuln/detail/CVE-2023-4540
github	www.github.com/daurnimator/lua-http/commit/ddab2835c583d45dec62680ca8d3cbde55e0bae6
github	www.github.com/daurnimator/lua-http

15 Jul 2026 01:48Current

7High risk

Vulners AI Score7

CVSS 3.17.5

EPSS0.00938