CVE-2025-53629 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2025-53629 Interim 1 4 2026-03-05T00:31:01Z current 2025-08-05T23:14:40Z 2026-03-05T00:31:01Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2025-53629 cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. Prior to 0.23.0, incoming requests using Transfer-Encoding: chunked in the header can allocate memory arbitrarily in the server, potentially leading to its exhaustion. This vulnerability is fixed in 0.23.0. NOTE: This vulnerability is related to CVE-2025-53628. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://www.suse.com/support/security/rating/ SUSE Security Ratings Container suse/sl-micro/6.0/baremetal-os-container:latest Container suse/sl-micro/6.0/toolbox:13.2-9.1 Container suse/sl-micro/6.1/baremetal-os-container:2.2.1-7.29 Image SL-Micro-Azure Image SL-Micro-BYOS-Azure Image SL-Micro-BYOS-EC2 Image SL-Micro-BYOS-GCE Image SL-Micro-EC2 Image SLE-Micro Image SLE-Micro-Azure Image SLE-Micro-BYOS Image SLE-Micro-BYOS-Azure Image SLE-Micro-BYOS-EC2 Image SLE-Micro-BYOS-GCE Image SLE-Micro-EC2 Image SLE-Micro-GCE Image SUSE-Multi-Linux-Manager-Proxy-BYOS-Azure Image SUSE-Multi-Linux-Manager-Proxy-BYOS-EC2 Image SUSE-Multi-Linux-Manager-Proxy-BYOS-GCE Image SUSE-Multi-Linux-Manager-Server-Azure-llc Image SUSE-Multi-Linux-Manager-Server-Azure-ltd Image SUSE-Multi-Linux-Manager-Server-BYOS-Azure Image SUSE-Multi-Linux-Manager-Server-BYOS-EC2 Image SUSE-Multi-Linux-Manager-Server-BYOS-GCE Image SUSE-Multi-Linux-Manager-Server-EC2-llc Image SUSE-Multi-Linux-Manager-Server-EC2-ltd SUSE Linux Enterprise Server 16.0 SUSE Linux Enterprise Server for SAP applications 16.0 SUSE Package Hub 15 SP6 openSUSE Leap 15.6 cpp-httplib cpp-httplib-devel-0.20.1-bp156.2.9.1 libcpp-httplib0_20-0.20.1-bp156.2.9.1 libcpp-httplib0_22 libcpp-httplib0_22-0.22.0-160000.4.1 runc-1.3.3-slfo.1.1_1.1 supportutils-3.2.10-1.1 runc-1.3.3-slfo.1.1_1.1 as a component of Container suse/sl-micro/6.0/baremetal-os-container:latest supportutils-3.2.10-1.1 as a component of Container suse/sl-micro/6.0/toolbox:13.2-9.1 runc-1.3.3-slfo.1.1_1.1 as a component of Container suse/sl-micro/6.1/baremetal-os-container:2.2.1-7.29 runc-1.3.3-slfo.1.1_1.1 as a component of Image SL-Micro-Azure runc-1.3.3-slfo.1.1_1.1 as a component of Image SL-Micro-BYOS-Azure runc-1.3.3-slfo.1.1_1.1 as a component of Image SL-Micro-BYOS-EC2 runc-1.3.3-slfo.1.1_1.1 as a component of Image SL-Micro-BYOS-GCE runc-1.3.3-slfo.1.1_1.1 as a component of Image SL-Micro-EC2 runc-1.3.3-slfo.1.1_1.1 as a component of Image SLE-Micro supportutils-3.2.10-1.1 as a component of Image SLE-Micro runc-1.3.3-slfo.1.1_1.1 as a component of Image SLE-Micro-Azure supportutils-3.2.10-1.1 as a component of Image SLE-Micro-Azure runc-1.3.3-slfo.1.1_1.1 as a component of Image SLE-Micro-BYOS supportutils-3.2.10-1.1 as a component of Image SLE-Micro-BYOS runc-1.3.3-slfo.1.1_1.1 as a component of Image SLE-Micro-BYOS-Azure supportutils-3.2.10-1.1 as a component of Image SLE-Micro-BYOS-Azure runc-1.3.3-slfo.1.1_1.1 as a component of Image SLE-Micro-BYOS-EC2 supportutils-3.2.10-1.1 as a component of Image SLE-Micro-BYOS-EC2 runc-1.3.3-slfo.1.1_1.1 as a component of Image SLE-Micro-BYOS-GCE supportutils-3.2.10-1.1 as a component of Image SLE-Micro-BYOS-GCE runc-1.3.3-slfo.1.1_1.1 as a component of Image SLE-Micro-EC2 supportutils-3.2.10-1.1 as a component of Image SLE-Micro-EC2 runc-1.3.3-slfo.1.1_1.1 as a component of Image SLE-Micro-GCE supportutils-3.2.10-1.1 as a component of Image SLE-Micro-GCE runc-1.3.3-slfo.1.1_1.1 as a component of Image SUSE-Multi-Linux-Manager-Proxy-BYOS-Azure runc-1.3.3-slfo.1.1_1.1 as a component of Image SUSE-Multi-Linux-Manager-Proxy-BYOS-EC2 runc-1.3.3-slfo.1.1_1.1 as a component of Image SUSE-Multi-Linux-Manager-Proxy-BYOS-GCE runc-1.3.3-slfo.1.1_1.1 as a component of Image SUSE-Multi-Linux-Manager-Server-Azure-llc runc-1.3.3-slfo.1.1_1.1 as a component of Image SUSE-Multi-Linux-Manager-Server-Azure-ltd runc-1.3.3-slfo.1.1_1.1 as a component of Image SUSE-Multi-Linux-Manager-Server-BYOS-Azure runc-1.3.3-slfo.1.1_1.1 as a component of Image SUSE-Multi-Linux-Manager-Server-BYOS-EC2 runc-1.3.3-slfo.1.1_1.1 as a component of Image SUSE-Multi-Linux-Manager-Server-BYOS-GCE runc-1.3.3-slfo.1.1_1.1 as a component of Image SUSE-Multi-Linux-Manager-Server-EC2-llc runc-1.3.3-slfo.1.1_1.1 as a component of Image SUSE-Multi-Linux-Manager-Server-EC2-ltd cpp-httplib-devel-0.20.1-bp156.2.9.1 as a component of SUSE Package Hub 15 SP6 libcpp-httplib0_20-0.20.1-bp156.2.9.1 as a component of SUSE Package Hub 15 SP6 cpp-httplib-devel-0.20.1-bp156.2.9.1 as a component of openSUSE Leap 15.6 libcpp-httplib0_20-0.20.1-bp156.2.9.1 as a component of openSUSE Leap 15.6 libcpp-httplib0_22-0.22.0-160000.4.1 as a component of SUSE Linux Enterprise Server 16.0 libcpp-httplib0_22 as a component of SUSE Linux Enterprise Server 16.0 cpp-httplib as a component of SUSE Linux Enterprise Server 16.0 libcpp-httplib0_22 as a component of SUSE Linux Enterprise Server for SAP applications 16.0 cpp-httplib as a component of SUSE Linux Enterprise Server for SAP applications 16.0 cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. Prior to 0.23.0, incoming requests using Transfer-Encoding: chunked in the header can allocate memory arbitrarily in the server, potentially leading to its exhaustion. This vulnerability is fixed in 0.23.0. NOTE: This vulnerability is related to CVE-2025-53628. CVE-2025-53629 Container suse/sl-micro/6.0/baremetal-os-container:latest:runc-1.3.3-slfo.1.1_1.1 Container suse/sl-micro/6.0/toolbox:13.2-9.1:supportutils-3.2.10-1.1 Container suse/sl-micro/6.1/baremetal-os-container:2.2.1-7.29:runc-1.3.3-slfo.1.1_1.1 Image SL-Micro-Azure:runc-1.3.3-slfo.1.1_1.1 Image SL-Micro-BYOS-Azure:runc-1.3.3-slfo.1.1_1.1 Image SL-Micro-BYOS-EC2:runc-1.3.3-slfo.1.1_1.1 Image SL-Micro-BYOS-GCE:runc-1.3.3-slfo.1.1_1.1 Image SL-Micro-EC2:runc-1.3.3-slfo.1.1_1.1 Image SLE-Micro:runc-1.3.3-slfo.1.1_1.1 Image SLE-Micro:supportutils-3.2.10-1.1 Image SLE-Micro-Azure:runc-1.3.3-slfo.1.1_1.1 Image SLE-Micro-Azure:supportutils-3.2.10-1.1 Image SLE-Micro-BYOS:runc-1.3.3-slfo.1.1_1.1 Image SLE-Micro-BYOS:supportutils-3.2.10-1.1 Image SLE-Micro-BYOS-Azure:runc-1.3.3-slfo.1.1_1.1 Image SLE-Micro-BYOS-Azure:supportutils-3.2.10-1.1 Image SLE-Micro-BYOS-EC2:runc-1.3.3-slfo.1.1_1.1 Image SLE-Micro-BYOS-EC2:supportutils-3.2.10-1.1 Image SLE-Micro-BYOS-GCE:runc-1.3.3-slfo.1.1_1.1 Image SLE-Micro-BYOS-GCE:supportutils-3.2.10-1.1 Image SLE-Micro-EC2:runc-1.3.3-slfo.1.1_1.1 Image SLE-Micro-EC2:supportutils-3.2.10-1.1 Image SLE-Micro-GCE:runc-1.3.3-slfo.1.1_1.1 Image SLE-Micro-GCE:supportutils-3.2.10-1.1 Image SUSE-Multi-Linux-Manager-Proxy-BYOS-Azure:runc-1.3.3-slfo.1.1_1.1 Image SUSE-Multi-Linux-Manager-Proxy-BYOS-EC2:runc-1.3.3-slfo.1.1_1.1 Image SUSE-Multi-Linux-Manager-Proxy-BYOS-GCE:runc-1.3.3-slfo.1.1_1.1 Image SUSE-Multi-Linux-Manager-Server-Azure-llc:runc-1.3.3-slfo.1.1_1.1 Image SUSE-Multi-Linux-Manager-Server-Azure-ltd:runc-1.3.3-slfo.1.1_1.1 Image SUSE-Multi-Linux-Manager-Server-BYOS-Azure:runc-1.3.3-slfo.1.1_1.1 Image SUSE-Multi-Linux-Manager-Server-BYOS-EC2:runc-1.3.3-slfo.1.1_1.1 Image SUSE-Multi-Linux-Manager-Server-BYOS-GCE:runc-1.3.3-slfo.1.1_1.1 Image SUSE-Multi-Linux-Manager-Server-EC2-llc:runc-1.3.3-slfo.1.1_1.1 Image SUSE-Multi-Linux-Manager-Server-EC2-ltd:runc-1.3.3-slfo.1.1_1.1 SUSE Package Hub 15 SP6:cpp-httplib-devel-0.20.1-bp156.2.9.1 SUSE Package Hub 15 SP6:libcpp-httplib0_20-0.20.1-bp156.2.9.1 openSUSE Leap 15.6:cpp-httplib-devel-0.20.1-bp156.2.9.1 openSUSE Leap 15.6:libcpp-httplib0_20-0.20.1-bp156.2.9.1 SUSE Linux Enterprise Server 16.0:libcpp-httplib0_22-0.22.0-160000.4.1 important 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H