Lucene search

K
redhatcveRedhat.comRH:CVE-2024-2398
HistoryMar 27, 2024 - 9:27 a.m.

CVE-2024-2398

2024-03-2709:27:15
redhat.com
access.redhat.com
47
curl
http/2
server push
memory leak

7.1 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

10.4%

A flaw was found in curl. When an application configures libcurl to use HTTP/2 server push and the amount of received headers for the push surpasses the maximum allowed limit, libcurl aborts the server push. When aborting, libcurl does not free all the previously allocated headers, resulting in a memory leak.