CVE-2023-38434

CVE-2023-38434 xHTTP commit 72f812d and below suffers from a double free vulnerability in closeconnection at xhttp.c, line 595. ifconn-request.public.headers.list != NULL freeconn-request.public.headers.list; To confirm the vulnerability, compile the xHTTP server included in this repository with...

CVE-2023-38434

xHTTP 72f812d has a double free in closeconnection in xhttp.c via a malformed HTTP request method...

CVE-2023-38434

xHTTP 72f812d has a double free in closeconnection in xhttp.c via a malformed HTTP request method...

CVE-2023-38434: Double Free

xHTTP 72f812d has a double free in closeconnection in xhttp.c via a malformed HTTP request method...

CVE-2023-38434

xHTTP 72f812d has a double free in closeconnection in xhttp.c via a malformed HTTP request method...

CVE-2023-38434

The CVE-2023-38434 issue affects the xHTTP server library (xhttp.c) where a double-free occurs in close_connection when handling a malformed HTTP request method. Root cause: freeing conn->request.public.headers.list twice. Impact: potential crash/denial of service (availability). A publicly do...