USN-6754-2 nghttp2 vulnerability

🗓️ 07 May 2024 14:44:21Reported by GoogleType

osv🔗 osv.dev👁 9 Views

USN-6754-2 fixes nghttp2 DoS CVEs in Ubuntu 24.04 LTS (HTTP/2 handling, cancellation, and CONTINUATION frames).

Reporter	Title	Published	Views	Family All 832
IBM Security Bulletins	Security Bulletin: Security vulnerabilities in IBM SDK for Node.js might affect the configuration editor used by IBM Business Automation Workflow and IBM Business Process Manager (BPM)	14 Sep 202215:02	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities affect IBM Cloud Private Kubernetes	23 Nov 201916:58	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in HTTP/2 implementation used by Watson Knowledge Catalog for IBM Cloud Pak for Data	11 Mar 202015:28	–	ibm
IBM Security Bulletins	Security Bulletin: WebSphere Liberty susceptible to HTTP2 implementation vulnerabilities	26 Mar 202012:19	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Technical Support Appliance - possible excessive use of CPU	6 Feb 202520:54	–	ibm
IBM Security Bulletins	Security Bulletin: Rational Asset Analyzer (RAA) is affected by several WebSphere Application Server vulnerabilities.	31 Jan 202017:21	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities have been identified with the DS8900F and DS8A00 Hardware Management Console (HMC)	3 Mar 202600:44	–	ibm
IBM Security Bulletins	Security Bulletin: IBM API Connect is vulnerable to denial of service attacks via HTTP/2.	2 Jan 202017:21	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Node.js affect IBM Cloud App Management	24 Oct 201911:45	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in nginx shipped with PowerAI Vision	8 Jan 202018:55	–	ibm

Source	Link
ubuntu	www.ubuntu.com/security/notices/USN-6754-2
ubuntu	www.ubuntu.com/security/CVE-2024-28182

22 Apr 2026 10:46Current

6.8Medium risk

Vulners AI Score6.8

CVSS 3.15.3

EPSS0.8496

SSVC