PT-2024-40495 · Unknown · Amphp/Http+1

Published 2024-04-03 · Updated 2024-04-03

Positive Technologies (AI Summary)

CVSS v3.1

8.2

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H

Name of the Vulnerable Software and Affected Versions amphp/http-client versions 4.0.0-rc10 through 4.0.0

Description The issue affects early versions of amphp/http-client with HTTP/2 support, causing the collection of HTTP/2 CONTINUATION frames in an unbounded buffer. This occurs because the header size limit is not checked until the END HEADERS flag is received, resulting in an Out-of-Memory (OOM) crash.

Recommendations For amphp/http-client versions 4.0.0-rc10 through 4.0.0, update to version 4.1.0-rc1 or later and ensure you also have an updated version of amphp/http for HTTP/2 processing.

Fix

Allocation of Resources Without Limits

Weakness Enumeration

CWE-789

CWE-770

Related Identifiers

GHSA-W8GF-G2VQ-J2F4

Affected Products

Amphp/Http

Amphp/Http-Client

References · 4

• https://osv.dev/vulnerability/GHSA-w8gf-g2vq-j2f4 · Vendor Advisory
• https://github.com/amphp/http-client/security/advisories/GHSA-w8gf-g2vq-j2f4 · Note
• https://github.com/amphp/http-client · Note
• https://github.com/amphp/http/security/advisories/GHSA-qjfw-cvjf-f4fm · Note