CVE-2023-4540
DoS in lua-http library
Summary
DoS in lua-http library
Original description
The description as published by the source.
Improper Handling of Exceptional Conditions vulnerability in Daurnimator lua-http library allows Excessive Allocation and a denial of service (DoS) attack to be executed by sending a properly crafted request to the server.
Such a request causes the program to enter an infinite loop.
This issue affects lua-http: all versions before commit ddab283.
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2023-4540 lua-http
- Ubuntu UBUNTU-CVE-2023-4540 lua-http
References
- advisory cert.pl
- advisory cert.pl
- advisory github.com
- advisory https
- advisory nvd.nist.gov
- package github.com
- patch github.com