{"id":"CVE-2024-45797","aliases":["ALPINE-CVE-2024-45797","DEBIAN-CVE-2024-45797","DLA-4295-1","EUVD-2024-41605","GHSA-rqqp-24ch-248f","MGASA-2026-0181","UBUNTU-CVE-2024-45797","USN-7814-1","openSUSE-SU-2025:15394-1"],"status":"published","title":"LibHTP's unbounded header handling leads to denial service","description":"LibHTP is a security-aware parser for the HTTP protocol and the related bits and pieces. Prior to version 0.5.49, unbounded processing of HTTP request and response headers can lead to excessive CPU time and memory utilization, possibly leading to extreme slowdowns. This issue is addressed in 0.5.49.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00735,"percentile":0.54716,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-770"],"published":"2024-10-16T18:45:08Z","modified":"2026-11-03T06:32:09Z","fixes":[{"ecosystem":"Alpine:v3.20","package":"suricata","fixed_in":["7.0.7-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"suricata","fixed_in":["7.0.7-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"suricata","fixed_in":["7.0.7-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"suricata","fixed_in":["7.0.7-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"suricata","fixed_in":["7.0.7-r0"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"libhtp","fixed_in":["1:0.5.42-1+deb12u1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"libhtp","fixed_in":["1:0.5.49-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libhtp","fixed_in":["0.5.15-1ubuntu0.1~esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"libhtp","fixed_in":["1:0.5.26-1ubuntu0.1~esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:20.04:LTS","package":"libhtp","fixed_in":["1:0.5.32-1ubuntu0.1~esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:22.04:LTS","package":"libhtp","fixed_in":["1:0.5.39-1ubuntu0.1~esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:24.04:LTS","package":"libhtp","fixed_in":["1:0.5.46-1ubuntu2+esm1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.20","package":"suricata","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.7-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"suricata","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.7-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"suricata","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.7-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"suricata","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.7-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"suricata","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.7-r0"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"libhtp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.5.42-1+deb12u1"}]}],"versions":["1:0.5.42-1"]},{"source":"osv","ecosystem":"Debian:13","package":"libhtp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.5.49-1"}]}]},{"source":"osv","ecosystem":"Debian:11","package":"libhtp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.5.36-1+deb11u1"}]}],"versions":["1:0.5.36-1"],"bundled":2},{"source":"osv","ecosystem":"Mageia:9","package":"suricata","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.10-1.mga9"}]}],"bundled":14},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libhtp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.15-1ubuntu0.1~esm1"}]}],"versions":["0.5.15-1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"libhtp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.5.26-1ubuntu0.1~esm1"}]}],"versions":["1:0.5.25-1","1:0.5.26-1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"libhtp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.5.32-1ubuntu0.1~esm1"}]}],"versions":["1:0.5.30-1","1:0.5.31-1","1:0.5.32-1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"libhtp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.5.39-1ubuntu0.1~esm1"}]}],"versions":["1:0.5.36-1","1:0.5.38-1","1:0.5.39-1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:24.04:LTS","package":"libhtp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.5.46-1ubuntu2+esm1"}]}],"versions":["1:0.5.45-1","1:0.5.46-1ubuntu1","1:0.5.46-1ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libhtp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.15-1ubuntu0.1~esm1"}]}],"versions":["0.5.15-1"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"libhtp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.5.26-1ubuntu0.1~esm1"}]}],"versions":["1:0.5.25-1","1:0.5.26-1"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"libhtp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.5.32-1ubuntu0.1~esm1"}]}],"versions":["1:0.5.30-1","1:0.5.31-1","1:0.5.32-1"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"libhtp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.5.39-1ubuntu0.1~esm1"}]}],"versions":["1:0.5.36-1","1:0.5.38-1","1:0.5.39-1"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:Pro:24.04:LTS","package":"libhtp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.5.46-1ubuntu2+esm1"}]}],"versions":["1:0.5.45-1","1:0.5.46-1ubuntu1","1:0.5.46-1ubuntu2"],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"suricata","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.0-1.1"}]}],"bundled":30}],"products":[{"vendor":"oisf","product":"libhtp"}],"references":[{"url":"https://github.com/OISF/libhtp/security/advisories/GHSA-rqqp-24ch-248f","tags":["x_refsource_CONFIRM","Exploit","Issue Tracking","Patch","Vendor Advisory","advisory","report"]},{"url":"https://redmine.openinfosecfoundation.org/issues/7191","tags":["x_refsource_MISC","Exploit","Issue Tracking","Patch","Vendor Advisory","web","report"]},{"url":"https://lists.debian.org/debian-lts-announce/2025/09/msg00009.html","tags":["web"]},{"url":"https://security.alpinelinux.org/vuln/CVE-2024-45797","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/45xxx/CVE-2024-45797.json","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-45797","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2024-45797","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2026-0181.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=33666","tags":["report"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WUPZOFSY4QOLJUU5AJZ7K6EES56A4KEN/","tags":["web"]},{"url":"https://forum.suricata.io/t/suricata-6-is-now-end-of-life-eol/4790","tags":["web"]},{"url":"https://forum.suricata.io/t/suricata-7-0-10-released/5522","tags":["web"]},{"url":"https://forum.suricata.io/t/suricata-7-0-9-released/5495","tags":["web"]},{"url":"https://forum.suricata.io/t/suricata-7-0-8-released/5137","tags":["web"]},{"url":"https://forum.suricata.io/t/suricata-7-0-7-released/4877","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2024-45797","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-45797","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-7814-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2024-23837","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-28871","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-53537","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2016-10728","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14568","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-10050","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-10053","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-23835","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-23836","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-23839","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-24568","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-32663","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-32664","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-32867","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-37151","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-38534","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-38535","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-38536","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-45795","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-45796","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-45797","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-47187","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-47188","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-47522","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-55605","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-55626","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-55627","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-55628","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-55629","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-29915","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-29916","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-29917","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-29918","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2024-45797","title":"LibHTP's unbounded header handling leads to denial service","description":"LibHTP is a security-aware parser for the HTTP protocol and the related bits and pieces. Prior to version 0.5.49, unbounded processing of HTTP request and response headers can lead to excessive CPU time and memory utilization, possibly leading to extreme slowdowns. This issue is addressed in 0.5.49.","status":"published","published":"2024-10-16T18:45:08Z","modified":"2025-11-03T18:08:22.69Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-770"],"updated_at":"2026-11-02T14:34:08.16279Z"}],"euvd":[{"id":"EUVD-2024-41605","description":"LibHTP is a security-aware parser for the HTTP protocol and the related bits and pieces. Prior to version 0.5.49, unbounded processing of HTTP request and response headers can lead to excessive CPU time and memory utilization, possibly leading to extreme slowdowns. This issue is addressed in 0.5.49.","status":"published","published":"2024-10-16T18:45:08Z","modified":"2025-11-03T18:08:22Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T19:49:34.635725Z"}],"nvd":[{"id":"CVE-2024-45797","description":"LibHTP is a security-aware parser for the HTTP protocol and the related bits and pieces. Prior to version 0.5.49, unbounded processing of HTTP request and response headers can lead to excessive CPU time and memory utilization, possibly leading to extreme slowdowns. This issue is addressed in 0.5.49.","status":"published","published":"2024-10-16T19:15:27.177Z","modified":"2026-06-17T07:54:50.27Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-770"],"updated_at":"2026-11-02T14:10:32.45889Z"}],"osv":[{"id":"ALPINE-CVE-2024-45797","description":"LibHTP is a security-aware parser for the HTTP protocol and the related bits and pieces. Prior to version 0.5.49, unbounded processing of HTTP request and response headers can lead to excessive CPU time and memory utilization, possibly leading to extreme slowdowns. This issue is addressed in 0.5.49.","status":"published","published":"2024-10-16T19:15:27.177Z","modified":"2026-11-03T06:32:09.11018104Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-03T07:18:15.355745Z"},{"id":"CVE-2024-45797","title":"LibHTP's unbounded header handling leads to denial service","description":"LibHTP is a security-aware parser for the HTTP protocol and the related bits and pieces. Prior to version 0.5.49, unbounded processing of HTTP request and response headers can lead to excessive CPU time and memory utilization, possibly leading to extreme slowdowns. This issue is addressed in 0.5.49.","status":"published","published":"2024-10-16T18:45:08Z","modified":"2026-10-28T02:31:13.166678694Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-770"],"updated_at":"2026-11-02T15:44:42.790566Z"},{"id":"DEBIAN-CVE-2024-45797","description":"LibHTP is a security-aware parser for the HTTP protocol and the related bits and pieces. Prior to version 0.5.49, unbounded processing of HTTP request and response headers can lead to excessive CPU time and memory utilization, possibly leading to extreme slowdowns. This issue is addressed in 0.5.49.","status":"published","published":"2024-10-16T19:15:27.177Z","modified":"2026-11-02T12:02:49.447342992Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:43.473331Z"},{"id":"UBUNTU-CVE-2024-45797","description":"LibHTP is a security-aware parser for the HTTP protocol and the related bits and pieces. Prior to version 0.5.49, unbounded processing of HTTP request and response headers can lead to excessive CPU time and memory utilization, possibly leading to extreme slowdowns. This issue is addressed in 0.5.49.","status":"published","published":"2024-10-16T19:15:00Z","modified":"2026-04-22T15:07:38.865579Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T16:55:02.636559Z"},{"id":"DLA-4295-1","title":"libhtp - security update","status":"published","published":"2025-09-08T00:00:00Z","modified":"2026-03-09T02:11:16.506173Z","updated_at":"2026-11-02T15:46:12.7027Z"},{"id":"MGASA-2026-0181","title":"Updated suricata packages fix security vulnerabilities","description":"Various security, performance, accuracy, and stability issues have been\nfixed, plus we have moved to a supported version.\n","status":"published","published":"2026-06-09T05:29:33Z","modified":"2026-06-09T05:49:01.083847901Z","updated_at":"2026-11-02T15:49:43.178336Z"},{"id":"openSUSE-SU-2025:15394-1","title":"libsuricata8_0_0-8.0.0-1.1 on GA media","description":"These are all security issues fixed in the libsuricata8_0_0-8.0.0-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-07-28T00:00:00Z","modified":"2026-03-23T04:53:43.337191Z","updated_at":"2026-11-02T16:58:37.810934Z"},{"id":"USN-7814-1","title":"libhtp vulnerabilities","description":"It was discovered that LibHTP did not correctly handle certain HTTP\nheaders. A remote attacker could possibly use this issue to cause a denial\nof service. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS,\nUbuntu 20.04 LTS and Ubuntu 22.04 LTS. (CVE-2024-23837)\n\nIt was discovered that LibHTP did not correctly parse certain HTTP\nrequests. A remote attacker could possibly use this issue to cause a\ndenial of service. This issue only affected Ubuntu 20.04 LTS,\nUbuntu 22.04 LTS and Ubuntu 24.04 LTS. (CVE-2024-28871)\n\nIt was discovered that LibHTP did not correctly parse certain HTTP\nrequests. A remote attacker could possibly use this issue to cause a\ndenial of service. (CVE-2024-45797)\n\nIt was discovered that LibHTP did not correctly handle certain memory\noperations. A remote attacker could possibly use this issue to cause a\ndenial of service. This issue only affected Ubuntu 20.04 LTS,\nUbuntu 22.04 LTS, Ubuntu 24.04 LTS and Ubuntu 25.04. (CVE-2025-53537)","status":"published","published":"2025-10-09T02:15:21Z","modified":"2026-06-25T13:32:31.171355373Z","updated_at":"2026-11-02T16:58:21.91885Z"}]}}