CVE-2023-4540

High

Description

Improper Handling of Exceptional Conditions vulnerability in Daurnimator lua-http library allows Excessive Allocation and a denial of service (DoS) attack to be executed by sending a properly crafted request to the server. Such a request causes the program to enter an infinite loop. This issue affects lua-http: all versions before commit ddab283.

SeverityHigh

CVSS7.5

Exploit probability—

ProductDaurnimator Lua-http

PublishedSep 5, 2023

First seenSep 5, 2023

Weakness typeCWE-755CWE-755

How to fix

Patches

github.com/daurnimator/lua-http/commit/ddab2835c583d45dec62680ca8d3cbde55e0bae6

Affected products

Product	Affected versions	Fixed in
daurnimator lua-http	0.4	—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.