> CVE-2024-51502

« BACK_TO_HOME
PUBLISHED
2024-11-04 23:15
MODIFIED
2024-11-21 17:15
EPSS (Prob. Exploit)
0.48%
Top 59.5%
DATA SOURCES:
NVD 🔗 2025-10-18 CVE PROJECT 🔗 2026-01-19 FIRST EPSS 🔗 2026-10-25 GITHUB 🔗 2026-11-11

> DESCRIPTION

loona is an experimental, HTTP/1.1 and HTTP/2 implementation in Rust on top of io-uring. `loona-hpack` suffers from the same vulnerability as the original `hpack` as documented in issue #11. All users who try to decode untrusted input using the Decoder are vulnerable to this exploit. This issue has been addressed in release version 0.4.3. All users are advised to upgrade. There are no known workarounds for this vulnerability.

> AFFECTED_PRODUCTS

ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.

> GITHUB SECURITY ADVISORY

GHSA-7vm6-qwh5-9x44 MODERATE

loona-hpack Panic Vulnerability

AFFECTED PACKAGES:
RUST / loona-hpack
<= 0.4.2
Fixed in: 0.4.3

> HISTORIQUE DES MODIFICATIONS

Première apparition
04/11/2024 23:15
Source: NVD
📊 ENRICHISSEMENT 18/10/2025 14:56
CVEPROJECT
Champ modifié: CVE Project
Ancienne valeur:
Non
Nouvelle valeur:
Oui
Total des modifications: 1 Dernière mise à jour: 1 year ago
« BACK_TO_HOME