Lucene search
RedHatRHSA-2024:3501HistoryMay 30, 2024 - 12:07 p.m.
(RHSA-2024:3501) Moderate: nghttp2 security update
2024-05-3012:07:46
access.redhat.com
10
nghttp2
http/2
security fix
cve-2024-28182
library
c
cvss score
dos
vulnerability
libnghttp2 is a library implementing the Hypertext Transfer Protocol version 2 (HTTP/2) protocol in C.
Security Fix(es):
- nghttp2: CONTINUATION frames DoS (CVE-2024-28182)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| RedHat | 9 | i686 | nghttp2-debugsource | < 1.43.0-5.el9_4.3 | nghttp2-debugsource-1.43.0-5.el9_4.3.i686.rpm |
| RedHat | 9 | x86_64 | libnghttp2-devel | < 1.43.0-5.el9_4.3 | libnghttp2-devel-1.43.0-5.el9_4.3.x86_64.rpm |
| RedHat | 9 | x86_64 | nghttp2-debugsource | < 1.43.0-5.el9_4.3 | nghttp2-debugsource-1.43.0-5.el9_4.3.x86_64.rpm |
| RedHat | 9 | aarch64 | nghttp2-debuginfo | < 1.43.0-5.el9_4.3 | nghttp2-debuginfo-1.43.0-5.el9_4.3.aarch64.rpm |
| RedHat | 9 | i686 | nghttp2-debuginfo | < 1.43.0-5.el9_4.3 | nghttp2-debuginfo-1.43.0-5.el9_4.3.i686.rpm |
| RedHat | 9 | s390x | libnghttp2-devel | < 1.43.0-5.el9_4.3 | libnghttp2-devel-1.43.0-5.el9_4.3.s390x.rpm |
| RedHat | 9 | x86_64 | libnghttp2-debuginfo | < 1.43.0-5.el9_4.3 | libnghttp2-debuginfo-1.43.0-5.el9_4.3.x86_64.rpm |
| RedHat | 9 | aarch64 | nghttp2-debugsource | < 1.43.0-5.el9_4.3 | nghttp2-debugsource-1.43.0-5.el9_4.3.aarch64.rpm |
| RedHat | 9 | x86_64 | nghttp2-debuginfo | < 1.43.0-5.el9_4.3 | nghttp2-debuginfo-1.43.0-5.el9_4.3.x86_64.rpm |
| RedHat | 9 | aarch64 | libnghttp2-debuginfo | < 1.43.0-5.el9_4.3 | libnghttp2-debuginfo-1.43.0-5.el9_4.3.aarch64.rpm |
Related
nessus
nessus
Amazon Linux 2 : nghttp2 (ALAS-2024-2523)
2024-04-30 00:00:00
Fedora 39 : nghttp2 (2024-a00de83de9)
2024-04-20 00:00:00
Ubuntu 24.04 LTS : nghttp2 vulnerability (USN-6754-2)
2024-05-07 00:00:00
slackware
slackware
[slackware-security] nghttp2
2024-04-04 19:17:04
fedora
fedora
[SECURITY] Fedora 38 Update: nghttp2-1.52.0-3.fc38
2024-04-20 02:14:40
[SECURITY] Fedora 40 Update: nghttp2-1.59.0-3.fc40
2024-04-19 21:41:43
[SECURITY] Fedora 39 Update: nghttp2-1.55.1-5.fc39
2024-04-20 01:03:28
amazon
amazon
Important: nghttp2
2024-05-09 17:43:00
Important: nghttp2
2024-04-24 22:15:00
openvas
openvas
Fedora: Security Advisory for nghttp2 (FEDORA-2024-ec22e51ec2)
2024-05-27 00:00:00
Fedora: Security Advisory for nghttp2 (FEDORA-2024-a00de83de9)
2024-05-27 00:00:00
Debian: Security Advisory (DLA-3804-1)
2024-05-01 00:00:00
osv
osv
Moderate: nghttp2 security update
2024-06-14 14:00:33
nghttp2 - security update
2024-04-30 00:00:00
Moderate: nghttp2 security update
2024-05-30 00:00:00
rocky
rocky
nghttp2 security update
2024-06-14 14:00:33
nodejs:20 security update
2024-05-09 18:50:42
nodejs security update
2024-06-14 14:00:40
f5
f5
K000139225: nghttp2 vulnerability CVE-2024-28182
2024-04-10 00:00:00
redhatcve
redhatcve
CVE-2024-28182
2024-04-03 19:27:34
cgr
cgr
CVE-2024-28182 vulnerabilities
2024-05-19 03:07:16
almalinux
almalinux
Moderate: nghttp2 security update
2024-05-30 00:00:00
Important: nodejs:18 security update
2024-05-09 00:00:00
Important: nodejs security update
2024-05-20 00:00:00
oraclelinux
oraclelinux
nghttp2 security update
2024-06-20 00:00:00
nodejs:20 security update
2024-05-09 00:00:00
nodejs security update
2024-05-22 00:00:00
mageia
mageia
Updated nghttp2 packages fix security vulnerability
2024-04-17 05:13:57
cvelist
cvelist
veracode
veracode
Denial Of Service (DoS)
2024-04-05 10:02:12
cbl_mariner
cbl_mariner
CVE-2024-28182 affecting package nodejs for versions less than 20.14.0-1
2024-06-21 09:32:44
cve
cve
CVE-2024-28182
2024-04-04 15:15:38
debiancve
debiancve
CVE-2024-28182
2024-04-04 15:15:38
ubuntucve
ubuntucve
CVE-2024-28182
2024-04-04 00:00:00
debian
debian
[SECURITY] [DLA 3804-1] nghttp2 security update
2024-04-30 21:29:26
redos
redos
ROS-20240507-08
2024-05-07 00:00:00
nvd
nvd
CVE-2024-28182
2024-04-04 15:15:38
wolfi
wolfi
CVE-2024-28182 vulnerabilities
2024-06-25 03:08:26
redhat
redhat
(RHSA-2024:2937) Important: nodejs security update
2024-05-21 04:57:15
(RHSA-2024:3544) Important: nodejs:18 security update
2024-06-03 06:38:41
(RHSA-2024:2910) Important: nodejs security update
2024-05-20 01:02:30
ubuntu
ubuntu
nghttp2 vulnerability
2024-05-07 00:00:00
nghttp2 vulnerabilities
2024-04-25 00:00:00
photon
photon
Important Photon OS Security Update - PHSA-2024-5.0-0242
2024-04-10 00:00:00
Important Photon OS Security Update - PHSA-2024-4.0-0591
2024-04-11 00:00:00
arista
arista
Security Advisory 0094
2024-04-05 00:00:00
thn
thn
New HTTP/2 Vulnerability Exposes Web Servers to DoS Attacks
2024-04-04 11:15:00
cert
cert
HTTP/2 CONTINUATION frames can be utilized for DoS attacks
2024-04-03 00:00:00
hp
hp
HP ThinPro 8.0 SP 9 Security Updates
2024-06-17 00:00:00