Lucene search

(RHSA-2024:3665) Moderate: nghttp2 security update

🗓️ 06 Jun 2024 08:03:15Reported by RedHatType

Moderate security update for nghttp2 protocol library implementing HTTP/2 in

Reporter	Title	Published	Views	Family All 90
Veracode	Denial Of Service (DoS)	5 Apr 202410:02	–	veracode
OSV	nghttp2 - security update	30 Apr 202400:00	–	osv
OSV	nghttp2 - security update	27 Sep 202400:00	–	osv
OSV	CGA-3396-g349-3rv6	6 Jun 202412:21	–	osv
OSV	nghttp2 vulnerabilities	25 Apr 202422:23	–	osv
OSV	nghttp2 vulnerability	7 May 202414:44	–	osv
OpenVAS	nghttp2 < 1.61.0 HTTP/2 Protocol DoS Vulnerability	8 Apr 202400:00	–	openvas
OpenVAS	Huawei EulerOS: Security Advisory for nghttp2 (EulerOS-SA-2024-2144)	20 Aug 202400:00	–	openvas
OpenVAS	Huawei EulerOS: Security Advisory for nghttp2 (EulerOS-SA-2024-2197)	20 Aug 202400:00	–	openvas
OpenVAS	Huawei EulerOS: Security Advisory for nghttp2 (EulerOS-SA-2024-2332)	3 Sep 202400:00	–	openvas

Vulners

Node

redhat jbcs-httpd24-curl-0Range≤8.7.1-2.el8jbcs

redhat jbcs-httpd24-httpd-0Range≤2.4.57-10.el8jbcs

redhat jbcs-httpd24-mod_http2-0Range≤1.15.19-37.el8jbcs

redhat jbcs-httpd24-mod_jk-0Range≤1.2.49-6.redhat_1.el8jbcs

redhat jbcs-httpd24-mod_md-1Range≤2.4.24-6.el8jbcs

redhat mod_clusterRange≤1.3.20-4.el8jbcs

redhat jbcs-httpd24-mod_security-0Range≤2.9.3-36.el8jbcs

redhat jbcs-httpd24-nghttp2-0Range≤1.43.0-13.el8jbcs

redhat jbcs-httpd24-curl-0Range≤8.7.1-2.el7jbcs

redhat jbcs-httpd24-httpd-0Range≤2.4.57-10.el7jbcs

redhat jbcs-httpd24-mod_http2-0Range≤1.15.19-37.el7jbcs

redhat jbcs-httpd24-mod_jk-0Range≤1.2.49-6.redhat_1.el7jbcs

redhat jbcs-httpd24-mod_md-1Range≤2.4.24-6.el7jbcs

redhat mod_clusterRange≤1.3.20-4.el7jbcs

redhat jbcs-httpd24-mod_security-0Range≤2.9.3-36.el7jbcs

redhat jbcs-httpd24-nghttp2-0Range≤1.43.0-13.el7jbcs

redhat nodejsRange≤20-8090020240422150739.a75119d5

redhat nodejsRange≤18-8090020240429131734.a75119d5

redhat nghttp2Range≤1.33.0-6.el8_10.1

redhat nghttp2-0Range≤1.33.0-3.el8_2.3

redhat nghttp2-0Range≤1.33.0-4.el8_4.2

redhat nghttp2-0Range≤1.33.0-4.el8_6.2

redhat nodejsRange≤18-8080020240621122004.63b34585

redhat nghttp2-0Range≤1.33.0-5.el8_8.1

redhat nodejsRange≤18-9040020240422140329.rhel9

redhat nodejsRange≤20-9040020240419140200.rhel9

redhat nodejsRange≤16.20.2-8.el9_4

redhat nghttp2Range≤1.43.0-5.el9_4.3

redhat nodejs-1Range≤16.20.2-9.el9_0

redhat nghttp2-0Range≤1.43.0-5.el9_0.3

redhat nodejs-1Range≤16.20.2-5.el9_2.3

redhat nodejsRange≤18-9020020240516091141.rhel9

redhat nghttp2-0Range≤1.43.0-5.el9_2.3

AND

redhat enterprise_linuxMatch8

redhat enterprise_linuxMatch9

OS	OS Version	Architecture	Package	Package Version	Filename
RedHat	9	ppc64le	nghttp2-debugsource	1.43.0-5.el9_2.3	nghttp2-debugsource-1.43.0-5.el9_2.3.ppc64le.rpm
RedHat	9	x86_64	nghttp2-debugsource	1.43.0-5.el9_2.3	nghttp2-debugsource-1.43.0-5.el9_2.3.x86_64.rpm
RedHat	9	ppc64le	libnghttp2	1.43.0-5.el9_2.3	libnghttp2-1.43.0-5.el9_2.3.ppc64le.rpm
RedHat	9	x86_64	libnghttp2	1.43.0-5.el9_2.3	libnghttp2-1.43.0-5.el9_2.3.x86_64.rpm
RedHat	9	s390x	nghttp2-debugsource	1.43.0-5.el9_2.3	nghttp2-debugsource-1.43.0-5.el9_2.3.s390x.rpm
RedHat	9	i686	libnghttp2	1.43.0-5.el9_2.3	libnghttp2-1.43.0-5.el9_2.3.i686.rpm
RedHat	9	aarch64	libnghttp2-devel	1.43.0-5.el9_2.3	libnghttp2-devel-1.43.0-5.el9_2.3.aarch64.rpm
RedHat	9	aarch64	libnghttp2	1.43.0-5.el9_2.3	libnghttp2-1.43.0-5.el9_2.3.aarch64.rpm
RedHat	9	aarch64	nghttp2	1.43.0-5.el9_2.3	nghttp2-1.43.0-5.el9_2.3.aarch64.rpm
RedHat	9	i686	libnghttp2-debuginfo	1.43.0-5.el9_2.3	libnghttp2-debuginfo-1.43.0-5.el9_2.3.i686.rpm

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

06 Jun 2024 08:15Current

7.2High risk

Vulners AI Score7.2

CVSS35.3

CWE-390