Skip to content
OpenAdvisories
High ICSA-24-319-16 2 CVEs

Hitachi Energy MSM (Update A)

Published Oct 29, 2024 · Updated May 5, 2026 · Revision 4

Vendor: Hitachi Energy Product: MSM

Summary

Hitachi Energy has assessed public reports of vulnerabilities initially believed to affect certain versions of the MSM product. Following further technical analysis and validation, Hitachi Energy has determined that the previously referenced product versions are not affected by these vulnerabilities. No customer action is required. Please consult the Recommended Immediate Actions Section for further advice.

Vulnerabilities 2

  • High 8.6
    CVE-2024-2398 EPSS 36%

    HTTP/2 push headers memory-leak

    When an application tells libcurl it wants to allow HTTP/2 server push, and the amount of received headers for the push surpasses the maximum allowed limit (1000), libcurl aborts the server push. When aborting, libcurl inadvertently does not free all the prev…

    curl curl curl curl Debian Ubuntu Azure Linux Alpine Wolfi
  • Medium 5.3
    CVE-2019-5097 EPSS 45%

    A denial-of-service vulnerability exists in the processing of multi-part/form-data requests in the base GoAhead web ser…

Revision history

  1. #4

    CISA Republication update based on Hitachi Energy 8DBD000205 advisory

  2. #3

    Affected Products: None

  3. #2

    CISA Republication - Initial Publication

  4. #1

    Initial public release.

References