VYPR
← All advisories
High severity7.5NVD Advisory· Published Jul 23, 2025· Updated Jun 17, 2026

CVE-2025-53537

CVE-2025-53537

Description

LibHTP is a security-aware parser for the HTTP protocol and its related bits and pieces. In versions 0.5.50 and below, there is a traffic-induced memory leak that can starve the process of memory, leading to loss of visibility. To workaround this issue, set suricata.yaml app-layer.protocols.http.libhtp.default-config.lzma-enabled to false. This issue is fixed in version 0.5.51.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Oisf/Libhtp3 versions
    cpe:2.3:a:oisf:libhtp:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:oisf:libhtp:*:*:*:*:*:*:*:*range: <0.5.51
    • (no CPE)range: <=0.5.50
    • (no CPE)range: < 0.5.51

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.