PT-2024-2591 · Unknown · Amphp/Http +1

🗓️ 05 Jan 2024 00:00:00Reported by Positive TechnologiesType

amphp http library memory allocation flaw in HTTP/2 continuation frames causes denial of service; update to fixed versions.

Reporter	Title	Published	Views	Family All 20
Arista	Security Advisory 0094	3 Apr 202400:00	–	arista
GithubExploit	Exploit for Allocation of Resources Without Limits or Throttling in Apache Http_Server	9 Apr 202408:08	–	githubexploit
Circl	CVE-2024-2653	9 Apr 202408:14	–	circl
CNNVD	amphp http 安全漏洞	3 Apr 202400:00	–	cnnvd
CVE	CVE-2024-2653	3 Apr 202417:18	–	cve
Cvelist	CVE-2024-2653 CVE-2024-2653	3 Apr 202417:18	–	cvelist
EUVD	EUVD-2024-1280	3 Oct 202520:07	–	euvd
F5 Networks	K000139227: amphp/http vulnerability CVE-2024-2653	9 Apr 202411:07	–	f5
Friends Of PHP	Denial of Service via HTTP/2 CONTINUATION Frames	1 Jan 197000:00	–	friendsofphp
Friends Of PHP	Denial of Service via HTTP/2 CONTINUATION Frames	1 Jan 197000:00	–	friendsofphp

Source	Link
github	www.github.com/FriendsOfPHP/security-advisories/blob/master/amphp/http/CVE-2024-2653.yaml
github	www.github.com/FriendsOfPHP/security-advisories/blob/master/amphp/http-client/CVE-2024-2653.yaml
osv	www.osv.dev/vulnerability/GHSA-qjfw-cvjf-f4fm
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-2653
bdu	www.bdu.fstec.ru/vul/2024-02654
github	www.github.com/amphp/http-client/security/advisories/GHSA-w8gf-g2vq-j2f4
github	www.github.com/amphp/http/commit/881cc33da236fbcd0cb0cf6c2bfc7efcf80ede76
github	www.github.com/amphp/http/security/advisories/GHSA-qjfw-cvjf-f4fm
github	www.github.com/amphp/http/commit/3a33e68a3b53f7279217238e89748cf0cb30b8a6
github	www.github.com/amphp/http

06 Sep 2024 00:00Current

8.1High risk

Vulners AI Score8.1

CVSS 28.5

CVSS 3.18.2

EPSS0.05065

SSVC