Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2024-10549

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-wwr9-4gmr-xvq9

H2O Vulnerable to Denial of Service (DoS) via `/3/Parse` Endpoint A vulnerability in the `/3/Parse` endpoint of h2oai/h2o-3 version 3.46.0.1 allows for a denial of service (DoS) attack. The endpoint uses a user-specified string to construct a regular expression, which is then applied to another user-specified string. By sending multiple simultaneous requests, an attacker can exhaust all available threads, leading to a complete denial of service.

gitlab/maven/ai.h2o/h2o-core/CVE-2024-10549

H2O Vulnerable to Denial of Service (DoS) via `/3/Parse` Endpoint A vulnerability in the `/3/Parse` endpoint of h2oai/h2o-3 version 3.46.0.1 allows for a denial of service (DoS) attack. The endpoint uses a user-specified string to construct a regular expression, which is then applied to another user-specified string. By sending multiple simultaneous requests, an attacker can exhaust all available threads, leading to a complete denial of service.

gitlab/pypi/h2o/CVE-2024-10549

H2O Vulnerable to Denial of Service (DoS) via `/3/Parse` Endpoint A vulnerability in the `/3/Parse` endpoint of h2oai/h2o-3 version 3.46.0.1 allows for a denial of service (DoS) attack. The endpoint uses a user-specified string to construct a regular expression, which is then applied to another user-specified string. By sending multiple simultaneous requests, an attacker can exhaust all available threads, leading to a complete denial of service.