Lucene search
PRIOn knowledge basePRION:CVE-2024-24750HistoryFeb 16, 2024 - 10:15 p.m.
Memory corruption
2024-02-1622:15:00
PRIOn knowledge base
www.prio-n.com
4
undici
http/1.1
node.js
memory leak
upgrade
Undici is an HTTP/1.1 client, written from scratch for Node.js. In affected versions calling fetch(url) and not consuming the incoming body ((or consuming it very slowing) will lead to a memory leak. This issue has been addressed in version 6.6.1. Users are advised to upgrade. Users unable to upgrade should make sure to always consume the incoming body.
Related
nvd
nvd
CVE-2024-24750
2024-02-16 22:15:07
osv
osv
fetch(url) leads to a memory leak in undici
2024-02-16 15:59:38
CVE-2024-24750
2024-02-16 22:15:07
debiancve
debiancve
CVE-2024-24750
2024-02-16 22:15:07
cve
cve
CVE-2024-24750
2024-02-16 22:15:07
github
github
fetch(url) leads to a memory leak in undici
2024-02-16 15:59:38
redhatcve
redhatcve
CVE-2024-24750
2024-02-18 11:49:30
ubuntucve
ubuntucve
CVE-2024-24750
2024-02-16 00:00:00
cvelist
cvelist
CVE-2024-24750 Backpressure request ignored in fetch() in Undici
2024-02-16 21:42:29
veracode
veracode
Denial Of Service (DoS)
2024-02-19 06:11:39
ibm
ibm