Bug 925887 (CVE-2024-23837)

Summary:	<net-libs/libhtp-0.5.46: denial of service
Product:	Gentoo Security	Reporter:	John Helmert III <ajak>
Component:	Vulnerabilities	Assignee:	Gentoo Security <security>
Status:	RESOLVED FIXED
Severity:	trivial	CC:	ajak, marecki
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
URL:	https://github.com/OISF/libhtp/security/advisories/GHSA-f9wf-rrjj-qx8m
See Also:	https://bugs.gentoo.org/show_bug.cgi?id=925747
Whiteboard:	~3 [noglsa]
Package list:		Runtime testing required:	---

Description John Helmert III archtester

2024-03-01 05:09:05 UTC

CVE-2024-23837:

LibHTP is a security-aware parser for the HTTP protocol. Crafted traffic can cause excessive processing time of HTTP headers, leading to denial of service. This issue is addressed in 0.5.46.