High severity7.5NVD Advisory· Published Apr 4, 2024· Updated Jun 17, 2026

CVE-2024-28871

Description

LibHTP is a security-aware parser for the HTTP protocol and the related bits and pieces. Version 0.5.46 may parse malformed request traffic, leading to excessive CPU usage. Version 0.5.47 contains a patch for the issue. No known workarounds are available.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Oisf/Libhtp3 versions
cpe:2.3:a:oisf:libhtp:0.5.46:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:oisf:libhtp:0.5.46:*:*:*:*:*:*:*
- (no CPE)range: <0.5.47
- (no CPE)range: = 0.5.46
osv-coords
pkg:rpm/opensuse/libhtp&distro=openSUSE%20Tumbleweed
Range: < 0.5.48-2.1

Patches

Vulnerability mechanics

References

github.com/OISF/libhtp/commit/79e713f3e527593a45f545e854cd9e6fbb3cd3ednvdPatch
github.com/OISF/libhtp/commit/bf618ec7f243cebfb0f7e84c3cb158955cb32b4dnvdPatch
github.com/OISF/libhtp/security/advisories/GHSA-ffr2-45w9-7wmgnvdVendor Advisory
redmine.openinfosecfoundation.org/issues/6757nvdIssue Tracking

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000