SecuritySpace - CVE-2024-22019

Vulnerability Search		Search 324607 CVE descriptions and 145615 test descriptions, access 10,000+ cross references.
	Tests CVE All

CVE ID: CVE-2024-22019

Description: A vulnerability in Node.js HTTP servers allows an attacker to send a specially crafted HTTP request with chunked encoding, leading to resource exhaustion and denial of service (DoS). The server reads an unbounded number of bytes from a single connection, exploiting the lack of limitations on chunk extension bytes. The issue can cause CPU and network bandwidth exhaustion, bypassing standard safeguards like timeouts and body size limits.

Test IDs: 1.3.6.1.4.1.25623.1.1.10.2024.0046

Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2024-22019
https://hackerone.com/reports/2233486
https://hackerone.com/reports/2233486
http://www.openwall.com/lists/oss-security/2024/03/11/1

CVE ID:	CVE-2024-22019
Description:	A vulnerability in Node.js HTTP servers allows an attacker to send a specially crafted HTTP request with chunked encoding, leading to resource exhaustion and denial of service (DoS). The server reads an unbounded number of bytes from a single connection, exploiting the lack of limitations on chunk extension bytes. The issue can cause CPU and network bandwidth exhaustion, bypassing standard safeguards like timeouts and body size limits.
Test IDs:	1.3.6.1.4.1.25623.1.1.10.2024.0046
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2024-22019 https://hackerone.com/reports/2233486 https://hackerone.com/reports/2233486 http://www.openwall.com/lists/oss-security/2024/03/11/1