We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.

Please see our statement on Data Privacy.

Zendesk (Helpdesk and Chat)
Bugpilot (Bug tracking)

Ok

THREATINT CVE Home CVE Diag Help
PUBLISHED

CVE-2024-2758

CVE-2024-2758

Reserved:2024-03-21
Published:2024-04-03
Updated:2024-04-03

Description

Tempesta FW rate limits are not enabled by default. They are either set too large to capture empty CONTINUATION frames attacks or too small to handle normal HTTP requests appropriately.

Problem types

CWE-1188: Initialization of a Resource with an Insecure Default

CWE-204: Inadequate Information Flow Control

Product status

0.7.0
affected

References

https://github.com/tempesta-tech/tempesta/security/advisories/GHSA-3xwj-5ch3-q9p4

https://www.kb.cert.org/vuls/id/421644

cve.org CVE-2024-2758

nvd.nist.gov CVE-2024-2758

Download JSON

Share this page
https://cve.threatint.com/CVE/CVE-2024-2758