Back Linuxsecurity Ubuntu 25.10: cpp-httplib Critical HTTP Access Attack 2025
A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 25.10 - Ubuntu 25.04 - Ubuntu 24.04 LTS - Ubuntu 22.04 LTS Summary: cpp-httplib could allow unintended access to network services if it received specially crafted network traffic. Software Description: - cpp-httplib: A C++11 single-file header-only cross platform HTTP/HTTPS library. Details: It was discovered that cpp-httplib did not correctly handle HTTP headers. A remote attacker could possibly use this issue to bypass authorization and impersonate users.
A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 25.10 - Ubuntu 25.04 - Ubuntu 24.04 LTS - Ubuntu 22.04 LTS Summary: cpp-httplib could allow unintended access to network services if it received specially crafted network traffic. Software Description: - cpp-httplib: A C++11 single-file header-only cross platform HTTP/HTTPS library. Details: It was discovered that cpp-httplib did not correctly handle HTTP headers. A remote attacker could possibly use this issue to bypass authorization and impersonate users.
The problem can be corrected by updating your system to the following package versions: Ubuntu 25.10 libcpp-httplib-dev 0.18.7-1ubuntu0.25.10.1 libcpp-httplib0.18 0.18.7-1ubuntu0.25.10.1 Ubuntu 25.04 libcpp-httplib-dev 0.18.7-1ubuntu0.25.04.1 libcpp-httplib0.18 0.18.7-1ubuntu0.25.04.1 Ubuntu 24.04 LTS libcpp-httplib-dev 0.14.3+ds-1.1ubuntu0.1~esm1 Available with Ubuntu Pro libcpp-httplib0.14t64 0.14.3+ds-1.1ubuntu0.1~esm1 Available with Ubuntu Pro Ubuntu 22.04 LTS libcpp-httplib-dev 0.10.3+ds-1ubuntu0.1~esm1 Available with Ubuntu Pro libcpp-httplib0 0.10.3+ds-1ubuntu0.1~esm1 Available with Ubuntu Pro In general, a standard system update will make all the necessary changes.
The problem can be corrected by updating your system to the following package versions: Ubuntu 25.10 libcpp-httplib-dev 0.18.7-1ubuntu0.25.10.1 libcpp-httplib0.18 0.18.7-1ubuntu0.25.10.1 Ubuntu 25.04 libcpp-httplib-dev 0.18.7-1ubuntu0.25.04.1 libcpp-httplib0.18 0.18.7-1ubuntu0.25.04.1 Ubuntu 24.04 LTS libcpp-httplib-dev 0.14.3+ds-1.1ubuntu0.1~esm1 Available with Ubuntu Pro libcpp-httplib0.14t64 0.14.3+ds-1.1ubuntu0.1~esm1 Available with Ubuntu Pro Ubuntu 22.04 LTS libcpp-httplib-dev 0.10.3+ds-1ubuntu0.1~esm1 Available with Ubuntu Pro libcpp-httplib0 0.10.3+ds-1ubuntu0.1~esm1 Available with Ubuntu Pro In general, a standard system update will make all the necessary changes.
The full story
This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.
