LI
Product
libhtp
7
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 5Medium 1Low 0
Watch
Add libhtp to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-10243 | 9.8 | Apr 4 | htp_parse_authorization_digest in htp_parsers.c in LibHTP 0.5.26 allows remote attackers to cause a heap-based buffer over-read via an authorization digest header Affected: 0.5.26 |
| CVE-2025-53537 | 7.5 | Jul 23 | LibHTP's memory leak with lzma can lead to resource starvation Affected: < 0.5.51 |
| CVE-2024-45797 | 7.5 | Oct 16 | LibHTP's unbounded header handling leads to denial service Affected: < 0.5.49 |
| CVE-2024-28871 | 7.5 | Apr 4 | Excessive CPU used on malformed traffic Affected: = 0.5.46 |
| CVE-2024-23837 | 7.5 | Feb 26 | LibHTP unbounded folded header handling leads to denial service Affected: < 0.5.46 |
| CVE-2015-0928 | 7.5 | Aug 28 | libhtp 0.5.15 allows remote attackers to cause a denial of service (NULL pointer dereference) Affected: 0.5.15 |
| CVE-2019-17420 | 5.3 | Oct 10 | In OISF LibHTP before 0.5.31, as used in Suricata 4.1.4 and other products, an HTTP protocol parsing error causes the http_header signature to not alert on a response with a… Affected: before 0.5.31 |
Showing 7