Lucene search
+L

23 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/07/23 12:00 a.m.•2 views

CVE-2024-39702: Inefficient Algorithmic Complexity

In ljstrhash.c in OpenResty 1.19.3.1 through 1.25.3.1, the string hashing function used during string interning allows HashDoS Hash Denial of Service attacks. An attacker could cause excessive resource usage during proxy operations via crafted requests, potentially leading to a denial of service...

5.9CVSS7.2AI score0.00556EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/07/23 12:00 a.m.•40 views

CVE-2024-39702

In ljstrhash.c in OpenResty 1.19.3.1 through 1.25.3.1, the string hashing function used during string interning allows HashDoS Hash Denial of Service attacks. An attacker could cause excessive resource usage during proxy operations via crafted requests, potentially leading to a denial of service...

0.00556EPSS
SaveExploits0References1
CVE
CVE
•added 2024/07/23 12:00 a.m.•259 views

CVE-2024-39702

The OpenResty web application server (versions 1.19.3.1 through 1.25.3.1 ) is vulnerable to a HashDoS (Hash Denial of Service) attack due to a flaw in the string hashing function located in lj_str_hash.c. This vulnerability specifically affects the OpenResty fork in the openresty/luajit2 GitHub r...

5.9CVSS6.4AI score0.00556EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder