CVE-2024-38809
- Source
- https://cve.org/CVERecord?id=CVE-2024-38809
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-38809.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2024-38809
- Aliases
- Downstream
- Related
- Withdrawn
- 2026-01-27T04:19:00.259116Z
- Published
- 2024-09-27T17:15:12Z
- Modified
- 2026-01-30T01:42:11.965870Z
- Summary
- [none]
- Details
-
Applications that parse ETags from "If-Match" or "If-None-Match" request headers are vulnerable to DoS attack.
Users of affected versions should upgrade to the corresponding fixed version.
Users of older, unsupported versions could enforce a size limit on "If-Match" and "If-None-Match" headers, e.g. through a Filter.
- References