| Release | Version |
|---|---|
| buster | 1:0.5.30-1 |
| bullseye | 1:0.5.36-1 |
| bookworm | 1:0.5.42-1 |
| trixie | 1:0.5.49-1 |
| sid | 1:0.5.49-1 |
| Bug | buster | bullseye | bookworm | trixie | sid | Description |
|---|---|---|---|---|---|---|
| CVE-2024-45797 | vulnerable (no DSA, postponed) | vulnerable (no DSA, postponed) | vulnerable (no DSA) | fixed | fixed | LibHTP is a security-aware parser for the HTTP protocol and the relate ... |
| CVE-2024-23837 | vulnerable (no DSA) | vulnerable (no DSA) | vulnerable (no DSA) | fixed | fixed | LibHTP is a security-aware parser for the HTTP protocol. Crafted traff ... |
| CVE-2019-17420 | vulnerable (no DSA) | fixed | fixed | fixed | fixed | In OISF LibHTP before 0.5.31, as used in Suricata 4.1.4 and other prod ... |
| Bug | Description |
|---|---|
| TEMP-0783007-4C0B51 | http uri parsing issue |
| TEMP-0777522-650525 | denial of service under memory stress |
| TEMP-0774897-BC9A31 | denial of service with specific packets |
| CVE-2024-28871 | LibHTP is a security-aware parser for the HTTP protocol and the relate ... |
| CVE-2018-10243 | htp_parse_authorization_digest in htp_parsers.c in LibHTP 0.5.26 allow ... |