CVE-2023-38434

xHTTP 72f812d has a double free in close_connection in xhttp.c via a malformed HTTP request method.

CVSS v3.1

7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

1.08% chance of exploitation in the next 30 days, 63th percentile

Published

2023-07-18

Updated

2024-10-28

Proof-of-concept exploits (2)

• cozis/xHTTP/issues/1
• Halcy0nic/CVE-2023-384341★ · 2023-07-18

References

• CVE Record
• NVD entry

Related

• CVE-2022-34556
• CVE-2022-34913
• CVE-2022-36234
• CVE-2022-36752
• CVE-2022-41220
• CVE-2022-43343