CVE-2024-2398

CVE-2024-2398 is a memory leak vulnerability in libcurl, affecting products such as Apple, Fedora Project, Haxx, and NetApp. This flaw occurs when libcurl attempts to abort an HTTP/2 server push due to an excessive number of headers, failing to free all allocated memory. Rated with a CVSS score of 8.6 (High), this vulnerability has a network attack vector, low attack complexity, and can lead to high confidentiality impact, and low integrity and availability impacts. The silent failure mode makes detection difficult for applications. Currently, there is no evidence of active exploitation, nor are there publicly available exploit modules in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are minimal.