xHTTP 资源管理错误漏洞

xHTTP is an HTTP server library from the individual developer Francesco Cozzuto. A security vulnerability exists in xHTTP version 72f812d, which stems from a double release that can be performed via a malformed HTTP request method...

CVE-2023-38434

The CVE-2023-38434 issue affects the xHTTP server library (xhttp.c) where a double-free occurs in close_connection when handling a malformed HTTP request method. Root cause: freeing conn->request.public.headers.list twice. Impact: potential crash/denial of service (availability). A publicly do...