Exploit for Double Free in Xhttp_Project Xhttp

CVE-2023-38434 xHTTP commit 72f812d and below suffers from a...

CVE-2023-38434

creationtimestamp| type| source ---|---|--- 2023-07-18 07:25:52+00:00| seen| https://t.me/cibsecurity/66878 2023-07-18 16:14:09+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/4766 2026-07-29 12:00:14+00:00| seen| https://t.me/CVEhub/17236 2026-07-30 00:00:33+00:00| seen|...

CVE-2023-38434

xHTTP 72f812d has a double free in closeconnection in xhttp.c via a malformed HTTP request method...

CVE-2023-38434

The CVE-2023-38434 issue affects the xHTTP server library (xhttp.c) where a double-free occurs in close_connection when handling a malformed HTTP request method. Root cause: freeing conn->request.public.headers.list twice. Impact: potential crash/denial of service (availability). A publicly do...