CVE-2024-45797

7.5 highEPSS 0.7%

High (7.5) in oisf libhtp. EPSS 0.7% chance of exploitation in the next 30 days.

LibHTP is a security-aware parser for the HTTP protocol and the related bits and pieces. Prior to version 0.5.49, unbounded processing of HTTP request and response headers can lead to excessive CPU time and memory utilization, possibly leading to extreme slowdowns. This issue is addressed in 0.5.49.

Severity

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS: 0.7% chance of exploitation in the next 30 days; higher than 54% of CVEs (scores of 2026-10-31)
CWE: CWE-770
Published: 2024-10-16
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

oisf:libhtp

References

https://github.com/OISF/libhtp/security/advisories/GHSA-rqqp-24ch-248f
https://redmine.openinfosecfoundation.org/issues/7191
https://lists.debian.org/debian-lts-announce/2025/09/msg00009.html

Check your stack JSON