{
  "cveId": "CVE-2024-45797",
  "url": "https://patchblox.com/security/cve/CVE-2024-45797",
  "summary": "CVE-2024-45797 is fixed in 2 products on 1 platform, first by DEBIAN-CVE-2024-45797, released October 16, 2024. It is not reported as exploited. Patch Radar priority: High.",
  "title": "libhtp: LibHTP is a security-aware parser for the HTTP protocol and the related bits and pieces",
  "description": "LibHTP is a security-aware parser for the HTTP protocol and the related bits and pieces. Prior to version 0.5.49, unbounded processing of HTTP request and response headers can lead to excessive CPU time and memory utilization, possibly leading to extreme slowdowns. This issue is addressed in 0.5.49.",
  "published": "2024-10-16T12:15:00Z",
  "severity": "high",
  "cvss": 7.5,
  "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
  "epss": 0.00735,
  "epssPercentile": 0.5468,
  "priority": "High",
  "priorityTier": 3,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "libhtp",
      "release": "Debian 12.15 (bookworm)",
      "fixedVersion": "1:0.5.42-1\u002Bdeb12u1",
      "fix": "DEBIAN-CVE-2024-45797",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2024-45797",
      "released": "2024-10-16T19:15:27Z"
    },
    {
      "platform": "linux",
      "product": "libhtp",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "1:0.5.49-1",
      "fix": "DEBIAN-CVE-2024-45797",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2024-45797",
      "released": "2024-10-16T19:15:27Z"
    },
    {
      "platform": "linux",
      "product": "libhtp2",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "1:0.5.26-1ubuntu0.1~esm1",
      "fix": "libhtp2 1:0.5.26-1ubuntu0.1~esm1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libhtp2-1-0.5.26-1ubuntu0.1-esm1",
      "released": "2025-07-23T14:15:00Z"
    },
    {
      "platform": "linux",
      "product": "libhtp2",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "1:0.5.32-1ubuntu0.1~esm1",
      "fix": "libhtp2 1:0.5.32-1ubuntu0.1~esm1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-libhtp2-1-0.5.32-1ubuntu0.1-esm1",
      "released": "2025-07-23T14:15:00Z"
    },
    {
      "platform": "linux",
      "product": "libhtp2",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "1:0.5.39-1ubuntu0.1~esm1",
      "fix": "libhtp2 1:0.5.39-1ubuntu0.1~esm1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-libhtp2-1-0.5.39-1ubuntu0.1-esm1",
      "released": "2025-07-23T14:15:00Z"
    },
    {
      "platform": "linux",
      "product": "libhtp2",
      "release": "Ubuntu 24.04.5 LTS (noble)",
      "fixedVersion": "1:0.5.46-1ubuntu2\u002Besm1",
      "fix": "libhtp2 1:0.5.46-1ubuntu2\u002Besm1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-noble-libhtp2-1-0.5.46-1ubuntu2-esm1",
      "released": "2025-07-23T14:15:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T06:59:42Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}