CVE-2024-7765
In h2oai/h2o-3 version 3.46.0.2, a vulnerability exists where uploading and repeatedly parsing a large GZIP file can cause a denial of service. The server becomes unresponsive due to memory exhaustion and a large number of concurrent slow-running jobs. This issue arises from the improper handling of highly compressed data, leading to significant data amplification.
Vendor
Product
CWE
Yayın Tarihi
2025-03-20 10:15:36
Güncelleme
2025-04-01 20:33:36
Source Identifier
security@huntr.dev
KEV Date Added
-