Unrated severityOSV Advisory· Published Apr 4, 2019· Updated Aug 5, 2024

CVE-2018-10243

Description

htp_parse_authorization_digest in htp_parsers.c in LibHTP 0.5.26 allows remote attackers to cause a heap-based buffer over-read via an authorization digest header.

Affected products

Oisf/LibhtpOSV2 versions
0.5.0, 0.5.1, 0.5.10, …+ 1 more
- (no CPE)range: 0.5.0, 0.5.1, 0.5.10, …
- (no CPE)range: = 0.5.26

Patches

Vulnerability mechanics

References

lists.debian.org/debian-lts-announce/2019/04/msg00010.htmlmitremailing-listx_refsource_MLIST
suricata-ids.org/2018/07/18/suricata-4-0-5-available/mitrex_refsource_CONFIRM

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000