Executive Summary
Informations | |||
---|---|---|---|
Name | CVE-2024-51502 | First vendor Publication | 2024-11-04 |
Vendor | Cve | Last vendor Modification | 2024-11-05 |
Security-Database Scoring CVSS v3
Cvss vector : N/A | |||
---|---|---|---|
Overall CVSS Score | NA | ||
Base Score | NA | Environmental Score | NA |
impact SubScore | NA | Temporal Score | NA |
Exploitabality Sub Score | NA | ||
Calculate full CVSS 3.0 Vectors scores |
Security-Database Scoring CVSS v2
Cvss vector : | |||
---|---|---|---|
Cvss Base Score | N/A | Attack Range | N/A |
Cvss Impact Score | N/A | Attack Complexity | N/A |
Cvss Expoit Score | N/A | Authentication | N/A |
Calculate full CVSS 2.0 Vectors scores |
Detail
loona is an experimental, HTTP/1.1 and HTTP/2 implementation in Rust on top of io-uring. `loona-hpack` suffers from the same vulnerability as the original `hpack` as documented in issue #11. All users who try to decode untrusted input using the Decoder are vulnerable to this exploit. This issue has been addressed in release version 0.4.3. All users are advised to upgrade. There are no known workarounds for this vulnerability. |
Original Source
Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-51502 |
CWE : Common Weakness Enumeration
% | Id | Name |
---|---|---|
100 % | CWE-755 | Improper Handling of Exceptional Conditions |
Sources (Detail)
Alert History
Date | Informations |
---|---|
2024-11-05 21:27:31 |
|
2024-11-05 05:28:08 |
|