com.typesafe.akka:akka-http-core_2.11

4 results · Feed

• High 7.5
  CVE-2023-44487 Exploited Public exploit EPSS 100%

  HTTP/2 Stream Cancellation Attack

  The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.

  nodejs golang go kubescape Debian Ubuntu Azure Linux Alpine Wolfi Maven Go SwiftURL
  Oct 10, 2023

  KEV Oct 10, 2023
• High 7.5
  CVE-2021-42697 Public exploit EPSS 36%

  Uncontrolled Recursion in Akka HTTP

  Akka HTTP 10.1.x before 10.1.15 and 10.2.x before 10.2.7 can encounter stack exhaustion while parsing HTTP headers, which allows a remote attacker to conduct a Denial of Service attack by sending a User-Agent header with deeply nested comments.

  com.typesafe.akka:akka-http-core_2.11 com.typesafe.akka:akka-http-core_2.12 com.typesafe.akka:akka-http-core_2.13 com.typesafe.akka:akka-http-core_2.13.0-RC2 Maven
  Nov 2, 2021
• High 7.5
  CVE-2018-16131

  High severity vulnerability that affects com.typesafe.akka:akka-http-core_2.11 and com.typesafe.akka:akka-http-core_2.12

  The decodeRequest and decodeRequestWith directives in Lightbend Akka HTTP 10.1.x through 10.1.4 and 10.0.x through 10.0.13 allow remote attackers to cause a denial of service (memory consumption and daemon crash) via a ZIP bomb.

  com.typesafe.akka:akka-http-core_2.12 com.typesafe.akka:akka-http-core_2.11 Maven
  Aug 30, 2018
• High 7.5
  CVE-2017-1000118

  Improper Restriction of Operations within the Bounds of a Memory Buffer in akka-http-core

  Akka HTTP versions <= 10.0.5 Illegal Media Range in Accept Header Causes StackOverflowError Leading to Denial of Service

  httpd com.typesafe.akka:akka-http-core_2.12 com.typesafe.akka:akka-http-core_2.11 Azure Linux Maven
  Oct 4, 2017