Skip to content
OpenAdvisories
High DLA-4295-1 2 CVEs

libhtp - security update

Published Sep 8, 2025 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 11 libhtp 1:0.5.36-1+deb11u1

Vulnerabilities 2

  • High 7.5

    LibHTP unbounded folded header handling leads to denial service

    LibHTP is a security-aware parser for the HTTP protocol. Crafted traffic can cause excessive processing time of HTTP headers, leading to denial of service. This issue is addressed in 0.5.46.

  • High 7.5

    LibHTP's unbounded header handling leads to denial service

    LibHTP is a security-aware parser for the HTTP protocol and the related bits and pieces. Prior to version 0.5.49, unbounded processing of HTTP request and response headers can lead to excessive CPU time and memory utilization, possibly leading to extreme slow…