CVE-2025-52887 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2025-52887 Interim 1 5 2026-03-05T00:31:27Z current 2025-06-30T23:14:20Z 2026-03-05T00:31:27Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2025-52887 cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. In version 0.21.0, when many http headers fields are passed in, the library does not limit the number of headers, and the memory associated with the headers will not be released when the connection is disconnected. This leads to potential exhaustion of system memory and results in a server crash or unresponsiveness. Version 0.22.0 contains a patch for the issue. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Linux Enterprise Server 16.0 SUSE Package Hub 15 SP6 openSUSE Leap 15.6 cpp-httplib cpp-httplib-devel-0.20.1-bp156.2.9.1 libcpp-httplib0_20-0.20.1-bp156.2.9.1 libcpp-httplib0_22 cpp-httplib-devel-0.20.1-bp156.2.9.1 as a component of SUSE Package Hub 15 SP6 libcpp-httplib0_20-0.20.1-bp156.2.9.1 as a component of SUSE Package Hub 15 SP6 cpp-httplib-devel-0.20.1-bp156.2.9.1 as a component of openSUSE Leap 15.6 libcpp-httplib0_20-0.20.1-bp156.2.9.1 as a component of openSUSE Leap 15.6 libcpp-httplib0_22 as a component of SUSE Linux Enterprise Server 16.0 cpp-httplib as a component of SUSE Linux Enterprise Server 16.0 cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. In version 0.21.0, when many http headers fields are passed in, the library does not limit the number of headers, and the memory associated with the headers will not be released when the connection is disconnected. This leads to potential exhaustion of system memory and results in a server crash or unresponsiveness. Version 0.22.0 contains a patch for the issue. CVE-2025-52887 SUSE Package Hub 15 SP6:cpp-httplib-devel-0.20.1-bp156.2.9.1 SUSE Package Hub 15 SP6:libcpp-httplib0_20-0.20.1-bp156.2.9.1 openSUSE Leap 15.6:cpp-httplib-devel-0.20.1-bp156.2.9.1 openSUSE Leap 15.6:libcpp-httplib0_20-0.20.1-bp156.2.9.1 SUSE Linux Enterprise Server 16.0:cpp-httplib SUSE Linux Enterprise Server 16.0:libcpp-httplib0_22 important 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H