Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2024-28871

Excessive CPU used on malformed traffic

Description

LibHTP is a security-aware parser for the HTTP protocol and the related bits and pieces. Version 0.5.46 may parse malformed request traffic, leading to excessive CPU usage. Version 0.5.47 contains a patch for the issue. No known workarounds are available.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

OISF libhtp

  • = 0.5.46affected

References