CVE-2023-44386

MEDIUM Year: 2023
CVSS v3 Score
5.3
Medium
Weakness Type
CWE-231
View all →

Vulnerability Description

Vapor is an HTTP web framework for Swift. There is a denial of service vulnerability impacting all users of affected versions of Vapor. The HTTP1 error handler closed connections when HTTP parse errors occur instead of passing them on. The issue is fixed as of Vapor release 4.84.2.

Related Vulnerabilities

CVE-2024-31397

MEDIUM
CVSS:4.9(Medium)

Improper handling of extra values issue exists in Cybozu Garoon 5.0.0 to 5.15.2. If this vulnerability is exploited, a user who can log in to the product with the administrative privilege may be able ...

CWE-2312024

CVE-2024-20268

HIGH
CVSS:7.7(High)

A vulnerability in the Simple Network Management Protocol (SNMP) feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an authentica...

CWE-2312024

CVE-2023-6841

HIGH
CVSS:7.5(High)

A denial of service vulnerability was found in keycloak where the amount of attributes per object is not limited,an attacker by sending repeated HTTP requests could cause a resource exhaustion when th...

CWE-2312023

CVE-2024-31397

MEDIUM
CVSS:4.9(Medium)

Improper handling of extra values issue exists in Cybozu Garoon 5.0.0 to 5.15.2. If this vulnerability is exploited, a user who can log in to the product with the administrative privilege may be able ...

CWE-2312024