Threats tagged 'brew-nvchecker-cve-2024-52804'

CVE-2024-52804 is a denial-of-service vulnerability in the Tornado Python web framework affecting versions prior to 6.4.2. The flaw is due to the HTTP cookie parsing algorithm exhibiting quadratic complexity when processing certain malicious cookie headers, leading to excessive CPU usage and blocking the event loop thread. This results in a denial of service. A patch is available to address this issue.