Lucene search

(RHSA-2024:3875) Moderate: nghttp2 security update

🗓️ 12 Jun 2024 22:11:26Reported by RedHatType

Security update for nghttp2 library implementing HTTP/2 protocol in

Reporter	Title	Published	Views	Family All 199
Tenable Nessus	Amazon Linux 2023 : libnghttp2, libnghttp2-devel, nghttp2 (ALAS2023-2024-592)	29 Apr 202400:00	–	nessus
Tenable Nessus	RHEL 9 : nghttp2 (RHSA-2024:3875)	13 Jun 202400:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP9 : nghttp2 (EulerOS-SA-2024-1968)	16 Jul 202400:00	–	nessus
Tenable Nessus	Rocky Linux 9 : nghttp2 (RLSA-2024:3501)	14 Jun 202400:00	–	nessus
Tenable Nessus	RHEL 9 : nghttp2 (RHSA-2024:3501)	30 May 202400:00	–	nessus
Tenable Nessus	Debian dla-3898 : libnghttp2-14 - security update	27 Sep 202400:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP11 : nghttp2 (EulerOS-SA-2024-1841)	25 Jun 202400:00	–	nessus
Tenable Nessus	Fedora 39 : nghttp2 (2024-a00de83de9)	20 Apr 202400:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP8 : nghttp2 (EulerOS-SA-2024-2481)	24 Sep 202400:00	–	nessus
Tenable Nessus	Amazon Linux 2 : nghttp2 (ALAS-2024-2523)	30 Apr 202400:00	–	nessus

Vulners

Node

redhat jbcs-httpd24-curl-0Range≤8.7.1-2.el8jbcs

redhat jbcs-httpd24-httpd-0Range≤2.4.57-10.el8jbcs

redhat jbcs-httpd24-mod_http2-0Range≤1.15.19-37.el8jbcs

redhat jbcs-httpd24-mod_jk-0Range≤1.2.49-6.redhat_1.el8jbcs

redhat jbcs-httpd24-mod_md-1Range≤2.4.24-6.el8jbcs

redhat mod_clusterRange≤1.3.20-4.el8jbcs

redhat jbcs-httpd24-mod_security-0Range≤2.9.3-36.el8jbcs

redhat jbcs-httpd24-nghttp2-0Range≤1.43.0-13.el8jbcs

redhat jbcs-httpd24-curl-0Range≤8.7.1-2.el7jbcs

redhat jbcs-httpd24-httpd-0Range≤2.4.57-10.el7jbcs

redhat jbcs-httpd24-mod_http2-0Range≤1.15.19-37.el7jbcs

redhat jbcs-httpd24-mod_jk-0Range≤1.2.49-6.redhat_1.el7jbcs

redhat jbcs-httpd24-mod_md-1Range≤2.4.24-6.el7jbcs

redhat mod_clusterRange≤1.3.20-4.el7jbcs

redhat jbcs-httpd24-mod_security-0Range≤2.9.3-36.el7jbcs

redhat jbcs-httpd24-nghttp2-0Range≤1.43.0-13.el7jbcs

redhat nodejsRange≤20-8090020240422150739.a75119d5

redhat nodejsRange≤18-8090020240429131734.a75119d5

redhat nghttp2Range≤1.33.0-6.el8_10.1

redhat nghttp2-0Range≤1.33.0-3.el8_2.3

redhat nghttp2-0Range≤1.33.0-4.el8_4.2

redhat nghttp2-0Range≤1.33.0-4.el8_6.2

redhat nodejsRange≤18-8080020240621122004.63b34585

redhat nghttp2-0Range≤1.33.0-5.el8_8.1

redhat nodejsRange≤18-9040020240422140329.rhel9

redhat nodejsRange≤20-9040020240419140200.rhel9

redhat nodejsRange≤16.20.2-8.el9_4

redhat nghttp2Range≤1.43.0-5.el9_4.3

redhat nodejs-1Range≤16.20.2-9.el9_0

redhat nghttp2-0Range≤1.43.0-5.el9_0.3

redhat nodejs-1Range≤16.20.2-5.el9_2.3

redhat nodejsRange≤18-9020020240516091141.rhel9

redhat nghttp2-0Range≤1.43.0-5.el9_2.3

AND

redhat enterprise_linuxMatch8

redhat enterprise_linuxMatch9

OS	OS Version	Architecture	Package	Package Version	Filename
RedHat	9	i686	nghttp2-debugsource	1.43.0-5.el9_0.3	nghttp2-debugsource-1.43.0-5.el9_0.3.i686.rpm
RedHat	9	x86_64	libnghttp2	1.43.0-5.el9_0.3	libnghttp2-1.43.0-5.el9_0.3.x86_64.rpm
RedHat	9	s390x	libnghttp2	1.43.0-5.el9_0.3	libnghttp2-1.43.0-5.el9_0.3.s390x.rpm
RedHat	9	x86_64	nghttp2-debugsource	1.43.0-5.el9_0.3	nghttp2-debugsource-1.43.0-5.el9_0.3.x86_64.rpm
RedHat	9	s390x	libnghttp2-debuginfo	1.43.0-5.el9_0.3	libnghttp2-debuginfo-1.43.0-5.el9_0.3.s390x.rpm
RedHat	9	ppc64le	nghttp2-debugsource	1.43.0-5.el9_0.3	nghttp2-debugsource-1.43.0-5.el9_0.3.ppc64le.rpm
RedHat	9	i686	nghttp2-debuginfo	1.43.0-5.el9_0.3	nghttp2-debuginfo-1.43.0-5.el9_0.3.i686.rpm
RedHat	9	aarch64	libnghttp2-debuginfo	1.43.0-5.el9_0.3	libnghttp2-debuginfo-1.43.0-5.el9_0.3.aarch64.rpm
RedHat	9	s390x	nghttp2-debuginfo	1.43.0-5.el9_0.3	nghttp2-debuginfo-1.43.0-5.el9_0.3.s390x.rpm
RedHat	9	ppc64le	nghttp2-debuginfo	1.43.0-5.el9_0.3	nghttp2-debuginfo-1.43.0-5.el9_0.3.ppc64le.rpm

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

12 Jun 2024 22:26Current

7.2High risk

Vulners AI Score7.2

CVSS35.3

CWE-390