{"vulnerability": "cve-2024-2791", "sightings": [{"uuid": "feb4c0f3-df09-45cf-8d0f-c37091dfd204", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-27919", "type": "published-proof-of-concept", "source": "https://t.me/proxy_bar/1998", "content": "CVE-2024-27316 \u0410\u0442\u0430\u043a\u0430 \u043d\u0430 http/2\n*\n\u041f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438\n*\n\u041a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u043e CVE-2024-27316  \u0432\u043b\u0438\u044f\u0435\u0442 \u043d\u0430 \u0434\u0440\u0443\u0433\u0438\u0435 CVE:\nCVE-2024-30255 (untested)\nCVE-2024-31309 (untested)\nCVE-2024-28182 (untested) \nCVE-2024-2653 (untested)\nCVE-2024-27919 (untested)\n*\nUsage:\ngo build\n./cve-2024-27316 -t 127.0.0.1:80 -p http -i 8192\n./cve-2024-27316 -t 127.0.0.1:443 -p https -i 8192\n*\nPOC exploit", "creation_timestamp": "2024-04-09T15:41:27.000000Z"}, {"uuid": "369168f5-3794-4175-bc28-fce9d41fffae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-27919", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/6990", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aProof of concept (PoC) for CVE-2024-27316 (tested), CVE-2024-30255 (untested), CVE-2024-31309 (untested), CVE-2024-28182 (untested), CVE-2024-2653 (untested) and CVE-2024-27919 (untested)\nURL\uff1ahttps://github.com/lockness-Ko/CVE-2024-27316\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-04-09T08:14:27.000000Z"}, {"uuid": "0f252665-9e64-4089-be19-37bc821e069d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-27913", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8981", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-27913\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: ospf_te_parse_te in ospfd/ospf_te.c in FRRouting (FRR) through 9.1 allows remote attackers to cause a denial of service (ospfd daemon crash) via a malformed OSPF LSA packet, because of an attempted access to a missing attribute field.\n\ud83d\udccf Published: 2024-02-28T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-26T21:12:35.446Z\n\ud83d\udd17 References:\n1. https://github.com/FRRouting/frr/pull/15431", "creation_timestamp": "2025-03-26T21:25:46.000000Z"}, {"uuid": "ddb655fd-065f-47b5-89f6-9f2cd25f109f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-27919", "type": "seen", "source": "https://t.me/arpsyndicate/4424", "content": "#ExploitObserverAlert\n\nCVE-2024-27919\n\nDESCRIPTION: Exploit Observer has 14 entries in 5 file formats related to CVE-2024-27919. Envoy is a cloud-native, open-source edge and service proxy. In versions 1.29.0 and 1.29.1, theEnvoy HTTP/2 protocol stack is vulnerable to the flood of CONTINUATION frames. Envoy's HTTP/2 codec does not reset a request when header map limits have been exceeded. This allows an attacker to send an sequence of CONTINUATION frames without the END_HEADERS bit set causing unlimited memory consumption. This can lead to denial of service through memory exhaustion. Users should upgrade to versions 1.29.2 to mitigate the effects of the CONTINUATION flood. Note that this vulnerability is a regression in Envoy version 1.29.0 and 1.29.1 only. As a workaround, downgrade to version 1.28.1 or earlier or disable HTTP/2 protocol for downstream connections.\n\nFIRST-EPSS: 0.000000000", "creation_timestamp": "2024-04-09T21:09:22.000000Z"}, {"uuid": "8add4f07-a10a-41f5-b617-8f1dc0a12c29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-27914", "type": "seen", "source": "https://t.me/ctinow/210824", "content": "https://ift.tt/9HwR56A\nCVE-2024-27914", "creation_timestamp": "2024-03-18T18:21:52.000000Z"}, {"uuid": "1eaba4c7-2ea6-4413-bb69-c0b058b793a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-27914", "type": "seen", "source": "https://t.me/ctinow/210829", "content": "https://ift.tt/9HwR56A\nCVE-2024-27914", "creation_timestamp": "2024-03-18T18:26:45.000000Z"}, {"uuid": "9836a943-f5cc-43dd-bfd0-b3e63fb09365", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-27917", "type": "seen", "source": "https://t.me/ctinow/201825", "content": "https://ift.tt/F3UmtnD\nCVE-2024-27917", "creation_timestamp": "2024-03-06T21:26:10.000000Z"}, {"uuid": "9f2d9581-1e19-4ae3-b090-8f42280beddd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-27917", "type": "seen", "source": "https://t.me/ctinow/201836", "content": "https://ift.tt/F3UmtnD\nCVE-2024-27917", "creation_timestamp": "2024-03-06T21:26:23.000000Z"}, {"uuid": "03bdfd59-c9d8-4211-b3a5-f782022c51d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-27915", "type": "seen", "source": "https://t.me/ctinow/201835", "content": "https://ift.tt/eTkbzEP\nCVE-2024-27915", "creation_timestamp": "2024-03-06T21:26:22.000000Z"}, {"uuid": "68f971b3-28e0-4278-be7a-7b9cb60f9599", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-27915", "type": "seen", "source": "https://t.me/ctinow/201824", "content": "https://ift.tt/eTkbzEP\nCVE-2024-27915", "creation_timestamp": "2024-03-06T21:26:09.000000Z"}, {"uuid": "54ef5175-2498-42e4-a915-2b5e2c93f537", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-27913", "type": "seen", "source": "https://t.me/ctinow/195183", "content": "https://ift.tt/SqTcXnJ\nCVE-2024-27913", "creation_timestamp": "2024-02-28T08:26:59.000000Z"}, {"uuid": "64e103af-4e2d-426d-90bf-e39cfb777a21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-27913", "type": "seen", "source": "https://t.me/ctinow/195179", "content": "https://ift.tt/SqTcXnJ\nCVE-2024-27913", "creation_timestamp": "2024-02-28T08:26:53.000000Z"}, {"uuid": "b1a286b3-3dde-41c9-aa7f-4191cd3af02d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-27913", "type": "seen", "source": "https://t.me/ctinow/208281", "content": "https://ift.tt/nB5Zjfy\nCVE-2024-27913 | FRRouting up to 9.1 OSPF LSA Packet ospfd/ospf_te.c ospf_te_parse_te denial of service", "creation_timestamp": "2024-03-14T23:31:29.000000Z"}]}