CVE-2020-11080

🗓️ 03 Jun 2020 00:00:00Reported by GitHub_MType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 745 Views

CVE-2020-11080: HTTP/2 SETTINGS frame size Do

Reporter	Title	Published	Views	Family All 336
IBM Security Bulletins	Security Bulletin: IBM Security QRadar Analyst Workflow add on to IBM QRadar SIEM is vulnerable to using components with known vulnerabilities	27 Jan 202123:48	–	ibm
IBM Security Bulletins	Security Bulletin: Security Vulnerabilities affect IBM Cloud Pak for Data - Node.js (CVE-2020-8172, CVE-2020-8174, CVE-2020-11080)	7 Oct 202006:15	–	ibm
IBM Security Bulletins	Security Bulletin: API Connect is impacted by a denial of service (DoS) vulnerability in Node.js (CVE-2020-11080)	2 Feb 202113:19	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect IBM® SDK for Node.js™ in IBM Cloud	15 Jun 202022:03	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Node.js affect IBM Spectrum Control (CVE-2020-8172, CVE-2020-8174, CVE-2020-11080)	23 Mar 202222:07	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect IBM Planning Analytics Workspace	3 Nov 202015:37	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Transformation Advisor is affected by multiple Node.js vulnerabilities.	15 Sep 202016:30	–	ibm
IBM Security Bulletins	Security Bulletin: Netcool Operations Insight - Cloud Native Event Analytics is affected by a International Components for Unicode (ICU) for C/C++ vulnerability (CVE-2020-10531)	13 Aug 202013:19	–	ibm
IBM Security Bulletins	Security Bulletin: Version 10.19.0 of Node.js included in IBM Netcool Operations Insight 1.6.0.x has several security vulnerabilities	7 Aug 202011:11	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities in Node.js affect IBM App Connect Enterprise V11	29 Jul 202007:36	–	ibm

NVD

Vulners

Node

nghttp2 nghttp2Range<1.41.0

Node

debian debian_linuxMatch9.0

debian debian_linuxMatch10.0

Node

opensuse leapMatch15.1

Node

fedoraproject fedoraMatch31

fedoraproject fedoraMatch33

Node

oracle banking_extensibility_workbenchMatch14.3.0

oracle banking_extensibility_workbenchMatch14.4.0

oracle blockchain_platformRange<21.1.2

oracle enterprise_communications_brokerMatch3.1.0

oracle enterprise_communications_brokerMatch3.2.0

oracle graalvmMatch19.3.2enterprise

oracle graalvmMatch20.1.0enterprise

oracle mysqlRange7.3.0–7.3.30

oracle mysqlRange7.4.0–7.4.29

oracle mysqlRange7.5.0–7.5.19

oracle mysqlRange7.6.0–7.6.15

oracle mysqlRange8.0.0–8.0.21

Node

nodejs node.jsRange10.0.0–10.12.0-

nodejs node.jsRange10.13.0–10.21.0lts

nodejs node.jsRange12.0.0–12.12.0-

nodejs node.jsRange12.13.0–12.18.0lts

nodejs node.jsRange14.0.0–14.4.0-

[
  {
    "vendor": "nghttp2",
    "product": "nghttp2",
    "versions": [
      {
        "version": "< 1.41.0",
        "status": "affected"
      }
    ]
  }
]

Source	Link
github	www.github.com/nghttp2/nghttp2/commit/336a98feb0d56b9ac54e12736b18785c27f75090
github	www.github.com/nghttp2/nghttp2/security/advisories/GHSA-q5wr-xfw9-q7xr
oracle	www.oracle.com/security-alerts/cpujan2021.html
oracle	www.oracle.com//security-alerts/cpujul2021.html
lists	www.lists.debian.org/debian-lts-announce/2021/10/msg00011.html
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AAC2AA36OTRHKSVM5OV7TTVB3CZIGEFL/
debian	www.debian.org/security/2020/dsa-4696
lists	www.lists.debian.org/debian-lts-announce/2023/10/msg00023.html
github	www.github.com/nghttp2/nghttp2/commit/f8da73bd042f810f34d19f9eae02b46d870af394
oracle	www.oracle.com/security-alerts/cpuoct2020.html

21 Nov 2024 04:56Current

6.5Medium risk

Vulners AI Score6.5

CVSS 25

CVSS 3.13.7 - 7.5

EPSS0.01247

SSVC