Description
amphp/http will collect CONTINUATION frames in an unbounded buffer and will not check a limit until it has received the set END_HEADERS flag, resulting in an OOM crash.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
AMPHP amphp/http-client
v4.0.0-rc10 to ≤ 4.0.0affected
AMPHP amphp/http
2.0.0-beta.1 to ≤ 2.1.0affected
AMPHP amphp/http
v1.6.0-rc1 to ≤ 1.7.2affected