| |
Vulnerability CVE-2024-27316
Published: 2024-04-04
| Description: |
HTTP/2 incoming headers exceeding the limit are temporarily buffered in nghttp2 in order to generate an informative HTTP 413 response. If a client does not stop sending headers, this leads to memory exhaustion. |
Type:
CWE-400 (Uncontrolled Resource Consumption ('Resource Exhaustion'))
References: |
https://httpd.apache.org/security/vulnerabilities_24.html
|
|
|
Copyright 2024, cxsecurity.com
|
|
|
