CVE-2024-28871: 
Linux Debian vulnerability analysis and mitigation

LibHTP, a security-aware parser for the HTTP protocol, contains a vulnerability in version 0.5.46 that was discovered and disclosed on April 4, 2024. The vulnerability allows malformed request traffic to cause excessive CPU usage. This security issue was assigned CVE-2024-28871 and received a CVSS v3.1 base score of 7.5 (High) (GitHub Advisory).

The vulnerability is classified as CWE-770 (Allocation of Resources Without Limits or Throttling). The issue was introduced when handling HTTP/0.9 protocol detection, specifically when parsing malformed request traffic with missing protocol information. The vulnerability manifests through quadratic complexity in the protocol checking mechanism after encountering a request line with a missing protocol (OISF Issue). The vulnerability was discovered through OSS-Fuzz testing (GitHub Advisory).

When exploited, this vulnerability can lead to excessive CPU usage, potentially causing a denial of service condition. The high CVSS score of 7.5 reflects the severity of the availability impact, with the attack being possible remotely without requiring privileges or user interaction (GitHub Advisory).

The vulnerability can be exploited by sending malformed request traffic to a system using LibHTP version 0.5.46. The attack vector is network-based, with low attack complexity and requires no privileges or user interaction (GitHub Advisory).

The vulnerability has been patched in LibHTP version 0.5.47. Users are advised to upgrade to this version as there are no known workarounds available (GitHub Advisory).