LibHTP is a security-aware parser for the HTTP protocol. Crafted traffic can cause excessive processing time of HTTP headers, leading to denial of service. This issue is addressed in 0.5.46.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade libhtp | May 15, 2025 | Feb 26, 2024 |
| Freebsd | — | Upgrade suricata | Dec 10, 2025 | Feb 23, 2024 |
| Suse | — | Upgrade libhtp-develUpgrade libhtp2 | Jun 5, 2024 | Feb 26, 2024 |
| Ubuntu | — | Upgrade libhtp2 (Ubuntu Pro)Upgrade libhtp1 (Ubuntu Pro)Upgrade libhtp2Upgrade libhtp-dev (Ubuntu Pro)Upgrade libhtp-dev | Oct 10, 2025 | Feb 26, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub