CVE-2023-4540
DoS in lua-http library
Résumé
DoS in lua-http library
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Improper Handling of Exceptional Conditions vulnerability in Daurnimator lua-http library allows Excessive Allocation and a denial of service (DoS) attack to be executed by sending a properly crafted request to the server.
Such a request causes the program to enter an infinite loop.
This issue affects lua-http: all versions before commit ddab283.
État des correctifs par distribution
Paquets corrigés publiés par chaque distribution pour cette CVE
- Debian DEBIAN-CVE-2023-4540 lua-http
- Ubuntu UBUNTU-CVE-2023-4540 lua-http
Références
- advisory cert.pl
- advisory cert.pl
- advisory github.com
- advisory https
- advisory nvd.nist.gov
- package github.com
- patch github.com