Overview
About vulnerability
Uncontrolled Resource Consumption vulnerability in the HTTP/1.1 message parser in Apache HttpComponents Core (5.4.2 and earlier, 5.5-beta1 and earlier) allows a remote attacker to cause a denial of service through memory exhaustion by sending messages with excessive number of headers / excessive header lengthDetails
- Affected product:
- Apache CXF , Apache Solr , Spring , calcite , docker-java , hazelcast , httpcomponents-client , httpcomponents-core , java-opensaml , testcontainers-java , wildfly , ws-wss4j
- Affected packages:
- httpcore5 @ 5.2.4 (+1243 more)