CVE-2024-23837

LibHTP is a security-aware parser for the HTTP protocol. Crafted traffic can cause excessive processing time of HTTP headers, leading to denial of service. This issue is addressed in 0.5.46...

CVE-2024-23837 LibHTP unbounded folded header handling leads to denial service

LibHTP is a security-aware parser for the HTTP protocol. Crafted traffic can cause excessive processing time of HTTP headers, leading to denial of service. This issue is addressed in 0.5.46...

LibHTP 安全漏洞

LibHTP is a security-aware parser. The product is mainly used for HTTP protocols, among others. A denial of service vulnerability exists in LibHTP prior to version 0.5.46. The vulnerability stems from failure to properly process incoming error messages, which can be exploited by an attacker to...

CVE-2024-23837: Allocation of Resources Without Limits or Throttling

LibHTP is a security-aware parser for the HTTP protocol. Crafted traffic can cause excessive processing time of HTTP headers, leading to denial of service. This issue is addressed in 0.5.46...

PT-2024-2334

Name of the Vulnerable Software and Affected Versions LibHTP versions prior to 0.5.46 Description The issue is related to excessive processing time of HTTP headers, leading to denial of service when crafted traffic is sent. This can be exploited by a remote attacker to cause a denial of service...

Fedora 36 : suricata (2022-b916a7f4a1)

The remote Fedora 36 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-b916a7f4a1 advisory. LibHTP has been updated to 0.5.42 and is bundled with the release. Various security, performance, accuracy and stability issues have been fixed. Tenable has...

libhtp:fuzz_htp: Crash in htp_connp_res_buffer

Detailed Report: https://oss-fuzz.com/testcase?key=5746994274631680 Project: libhtp Fuzzing Engine: libFuzzer Fuzz Target: fuzzhtp Job Type: libfuzzermsanlibhtp Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x701000010000 Crash State: htpconnpresbuffer htpconnpRESLINE htpconnpresdat...

CVE-2019-17420

In OISF LibHTP before 0.5.31, as used in Suricata 4.1.4 and other products, an HTTP protocol parsing error causes the httpheader signature to not alert on a response with a single \r\n ending...

DEBIAN-CVE-2019-17420

In OISF LibHTP before 0.5.31, as used in Suricata 4.1.4 and other products, an HTTP protocol parsing error causes the httpheader signature to not alert on a response with a single \r\n ending...

CVE-2019-17420

In OISF LibHTP before 0.5.31, as used in Suricata 4.1.4 and other products, an HTTP protocol parsing error causes the httpheader signature to not alert on a response with a single \r\n ending...

CVE-2019-17420

In OISF LibHTP before 0.5.31, as used in Suricata 4.1.4 and other products, an HTTP protocol parsing error causes the httpheader signature to not alert on a response with a single \r\n ending...

Code injection

In OISF LibHTP before 0.5.31, as used in Suricata 4.1.4 and other products, an HTTP protocol parsing error causes the httpheader signature to not alert on a response with a single \r\n ending...

UBUNTU-CVE-2019-17420

In OISF LibHTP before 0.5.31, as used in Suricata 4.1.4 and other products, an HTTP protocol parsing error causes the httpheader signature to not alert on a response with a single \r\n ending...

CVE-2019-17420

CVE-2019-17420 affects LibHTP before 0.5.31, as used in Suricata 4.1.4 and other products. The vulnerability arises from an HTTP protocol parsing error that causes the http_header signature to fail to alert on a response ending with a single CRLF ("\r\n"). Impact is that such responses may bypass...

CVE-2019-17420

In OISF LibHTP before 0.5.31, as used in Suricata 4.1.4 and other products, an HTTP protocol parsing error causes the httpheader signature to not alert on a response with a single \r\n ending...

CVE-2019-17420

In OISF LibHTP before 0.5.31, as used in Suricata 4.1.4 and other products, an HTTP protocol parsing error causes the httpheader signature to not alert on a response with a single \r\n ending...

CVE-2019-17420: Incomplete Cleanup

In OISF LibHTP before 0.5.31, as used in Suricata 4.1.4 and other products, an HTTP protocol parsing error causes the httpheader signature to not alert on a response with a single \r\n ending...

libhtp:fuzz_htp: Use-of-uninitialized-value in crc32

Detailed Report: https://oss-fuzz.com/testcase?key=5629763112140800 Project: libhtp Fuzzing Engine: libFuzzer Fuzz Target: fuzzhtp Job Type: libfuzzermsanlibhtp Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: crc32 htpgzipdecompressordecompress...

libhtp:fuzz_htp: Heap-buffer-overflow in LzmaDec_DecodeToDic

Detailed Report: https://oss-fuzz.com/testcase?key=5659352148475904 Project: libhtp Fuzzing Engine: afl Fuzz Target: fuzzhtp Job Type: aflasanlibhtp Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x621000003a6d Crash State: LzmaDecDecodeToDic LzmaDecDecodeToBuf...

libhtp:fuzz_htp: Use-of-uninitialized-value in LzmaDec_TryDummy

Detailed Report: https://oss-fuzz.com/testcase?key=5164808743157760 Project: libhtp Fuzzing Engine: libFuzzer Fuzz Target: fuzzhtp Job Type: libfuzzermsanlibhtp Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: LzmaDecTryDummy LzmaDecDecodeToDic...