Lucene search
F5F5:K000139227HistoryApr 09, 2024 - 12:00 a.m.
K000139227 : amphp/http vulnerability CVE-2024-2653
2024-04-0900:00:00
my.f5.com
23
amphp/http
vulnerability
oom crash
Security Advisory Description
amphp/http will collect CONTINUATION frames in an unbounded buffer and will not check a limit until it has received the set END_HEADERS flag, resulting in an OOM crash. (CVE-2024-2653)
Impact
There is no impact; F5 products are not affected by this vulnerability.
Related
redhatcve
redhatcve
CVE-2024-2653
2024-04-03 19:26:54
veracode
veracode
Denial Of Service (DoS)
2024-04-04 05:00:45
friendsofphp
friendsofphp
Denial of Service via HTTP/2 CONTINUATION Frames
1970-01-01 00:00:00
Denial of Service via HTTP/2 CONTINUATION Frames
1970-01-01 00:00:00
osv
osv
AMPHP Denial of Service via HTTP/2 CONTINUATION Frames
2024-04-03 18:06:45
cvelist
cvelist
CVE-2024-2653 CVE-2024-2653
2024-04-03 17:18:29
nvd
nvd
CVE-2024-2653
2024-04-03 18:15:07
gitlab
gitlab
AMPHP Denial of Service via HTTP/2 CONTINUATION Frames
2024-04-03 00:00:00
AMPHP Denial of Service via HTTP/2 CONTINUATION Frames
2024-04-03 00:00:00
cve
cve
CVE-2024-2653
2024-04-03 18:15:07
github
github
AMPHP Denial of Service via HTTP/2 CONTINUATION Frames
2024-04-03 18:06:45
arista
arista
Security Advisory 0094
2024-04-05 00:00:00
thn
thn
New HTTP/2 Vulnerability Exposes Web Servers to DoS Attacks
2024-04-04 11:15:00
cert
cert
HTTP/2 CONTINUATION frames can be utilized for DoS attacks
2024-04-03 00:00:00