Lucene search
FreeBSD4DA51989-5A8B-4EB9-B442-46D94EC0802DHistoryApr 27, 2023 - 12:00 a.m.
h2o -- Malformed HTTP/1.1 causes Out-of-Memory Denial of Service
2023-04-2700:00:00
vuxml.freebsd.org
5
http malformation
worker process crash
out-of-memory
dos
unix
8.2 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
0.002 Low
EPSS
Percentile
58.8%
Elijah Glover reports:
Malformed HTTP/1.1 requests can crash worker processes.
occasionally locking up child workers and causing denial of
service, and an outage dropping any open connections.
Related
cve
cve
CVE-2023-30847
2023-04-27 15:15:13
prion
prion
Design/Logic Flaw
2023-04-27 15:15:00
osv
osv
CVE-2023-30847
2023-04-27 15:15:13
ubuntucve
ubuntucve
CVE-2023-30847
2023-04-27 00:00:00
nessus
nessus
alpinelinux
alpinelinux
CVE-2023-30847
2023-04-27 15:15:13
cvelist
cvelist
nvd
nvd
CVE-2023-30847
2023-04-27 15:15:13
debiancve
debiancve
CVE-2023-30847
2023-04-27 15:15:13
8.2 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
0.002 Low
EPSS
Percentile
58.8%
Related for 4DA51989-5A8B-4EB9-B442-46D94EC0802D