CVE-2023-4540highCWE-755

CVE-2023-4540: falha de alta gravidade em Daurnimator lua-http

DoS in lua-http library

Publicada em 05 set 2023 · Atualizada em 04 abr 2025

Seguir esta CVE + Monitorar lua-http + Monitorar lua-http

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 7.5epss 1.1%

Improper Handling of Exceptional Conditions vulnerability in Daurnimator lua-http library allows Excessive Allocation and a denial of service (DoS) attack to be executed by sending a properly crafted request to the server. Such a request causes the program to enter an infinite loop. This issue affects lua-http: all versions before commit ddab283.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Produtos afetados

Daurnimator · lua-http

Referências

https://cert.pl/en/posts/2023/09/CVE-2023-4540/https://cert.pl/posts/2023/09/CVE-2023-4540/https://github.com/daurnimator/lua-http/commit/ddab2835c583d45dec62680ca8d3cbde55e0bae6 https://https://cert.pl/en/posts/2023/09/CVE-2023-4540/