CVE-2024-5055
Assigner: INCIBE
Published: 2024-05-17T12:03:19.748Z
State: PUBLISHED
affected: defaultStatus: unaffected
product: XAMPP
vendor: Apache Friends
versions: status: affected
version: 7.3.2
credits: type: finder
value: Rafael Pedrero
datePublic: 2024-05-17T10:00:00.000Z
descriptions: supportingMedia: base64: no
type: text/html
value: Uncontrolled resource consumption vulnerability in XAMPP Windows, versions 7.3.2 and earlier. This vulnerability exists when XAMPP attempts to process many incomplete HTTP requests, resulting in resource consumption and system crashes.
value: Uncontrolled resource consumption vulnerability in XAMPP Windows, versions 7.3.2 and earlier. This vulnerability exists when XAMPP attempts to process many incomplete HTTP requests, resulting in resource consumption and system crashes.
metrics: cvssV3_1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 7.5
baseSeverity: HIGH
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
version: 3.1
format: CVSS
scenarios: value: GENERAL
problemTypes: descriptions: cweId: CWE-400
description: CWE-400 Uncontrolled Resource Consumption
type: CWE
source: discovery: EXTERNAL
title: Vulnerability of uncontrolled resource consumption in XAMPP
x_generator: engine: Vulnogram 0.2.0