CVE-2024-23837 — LibHTP unbounded folded header handling leads to denial service

Affected: OISF libhtp, fedoraproject fedora

LibHTP is a security-aware parser for the HTTP protocol. Crafted traffic can cause excessive processing time of HTTP headers, leading to denial of service. This issue is addressed in 0.5.46.

USN-7814-1 — libhtp vulnerabilities

Affected: Ubuntu:Pro:16.04:LTS: libhtp, Ubuntu:Pro:18.04:LTS: libhtp, Ubuntu:Pro:20.04:LTS: libhtp, Ubuntu:Pro:22.04:LTS: libhtp, Ubuntu:Pro:24.04:LTS: libhtp

It was discovered that LibHTP did not correctly handle certain HTTP headers. A remote attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS and Ubuntu 22.04 LTS. (CVE-2024-23837)

It was discovered that LibHTP did not correctly parse certain HTTP requests. A remote attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 20.04 LTS, Ubuntu 22.04 LTS and Ubuntu 24.04 LTS. (CVE-2024-28871)

It was discovered that LibHTP did not correctly parse certain HTTP requests. A remote attacker could possibly use this issue to cause a denial of service. (CVE-2024-45797)

It was discovered that LibHTP did not correctly handle certain memory operations. A remote attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu 24.04 LTS and Ubuntu 25.04. (CVE-2025-53537)

Most recent entries from all

CVE-2024-23837 — LibHTP unbounded folded header handling leads to denial service

USN-7814-1 — libhtp vulnerabilities