View at Official debian advisory, NVD, CVE.org · CVE detail
Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.
CVE-2018-10243 not yet assigned priority: Debian including 2 source packages (libhtp, suricata), 9 status rows across 5 suites (bookworm, bullseye, forky, sid, trixie): resolved 9.
htp_parse_authorization_digest in htp_parsers.c in LibHTP 0.5.26 allows remote attackers to cause a heap-based buffer over-read via an authorization digest header.