Proof-of-Concept-POC---CVE-2026-49975-HTTP-2-Bomb-

CVE-2026-49975 - HTTP/2 Bomb 概念验证 描述 CVE-2026-49975，也称为 HTTP/2 Bomb ，是一种远程拒绝服务（DoS）漏洞，影响大多数主流 Web 服务器在其默认 HTTP/2 配置下的运行。 该漏洞由 OpenAI Codex 在结合两种已存在近十年的技术时发现： HPACK Bomb ：网络中的一个字节在服务器端会转化为完整的标头分配 Slowloris-style hold ：零字节流量控制窗口阻止内存释放 受影响的服务端 服务端| 受影响版本| 状态 ---|---|--- nginx| 1.29.8| ✅ 已修复 Apache...

CVE-2026-49975

CVE-2026-49975 HTTP/2 Bomb 复现工具 作者 ：polar bear 版本 ：2.1 适用漏洞 ：CVE-2026-49975（HTTP/2 协议内存炸弹） 📖 漏洞原理 CVE-2026-49975 是 HTTP/2 协议实现中的内存耗尽漏洞，攻击链包含两个关键步骤： 1. HPACK 压缩炸弹 ：在单个 HTTP/2 流中重复发送相同头部（如 x-bomb: test），迫使服务器为每次引用分配完整的内存结构，实现 4000:1 以上的内存放大 。 2. 窗口停滞 ：将初始流控窗口设为 0，阻止服务器发送响应，导致已分配的内存被永久锁定，无法释放。...

http2-bomb

HTTP/2 炸弹 — CVE-2026-49975 HTTP/2 流放大 PoC · Docker · Web 控制台 漏洞 HTTP/2 允许在单个 TCP 连接上多路复用多个流。此 PoC 构造了包含大量内部引用的特制 HEADERS 帧，强制服务器分配大量内存来跟踪这些引用。 服务器| 放大倍数| 效果 ---|---|--- Envoy 1.37.2| 5,700:1| 约 10 秒内 32 GB Apache httpd 2.4.67| 4,000:1| 约 18 秒内 32 GB Nginx| 高| 快速 OOM 极少的流量，最大程度的内存耗尽。 快速开始 git clon...

EulerOS Virtualization 2.12.0 : mod_http2 (EulerOS-SA-2026-3652)

According to the versions of the modhttp2 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Memory Allocation with Excessive Size Value vulnerability in Apache HTTP Server's modhttp leads to denial of service via malicious...

TencentOS Server 4: mod_http2 (TSSA-2026:0968)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0968 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

nginx: Fix of CVE-2026-49975

CVE-2026-49975: improve the maxheaders patch to preserve binary compatibility with externally-built nginx modules...

Important: Red Hat Security Advisory: mod_http2 security update

An update for modhttp2 is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

Vulnerability in Cosminexus HTTP Server

Overview VulnerabilityCVE-2026-49975 has been found in Cosminexus HTTP Server. This vulnerability does not apply if HTTP/2 protocol is disabled. Impact Regarding the impact of the vulnerability, please refer to the vendor advisory. Solution Please refer to the 'Vendor Information' section for the...

Photon OS 5.0: Httpd PHSA-2026-5.0-91-0881

An update of the httpd package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-91-0881. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Oracle Linux 10 : mod_http2 (ELSA-2026-25225)

The remote Oracle Linux 10 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-25225 advisory. - Resolves: RHEL-188008 - address CVE-2026-43951, CVE-2026-48913 - Resolves: RHEL-182410 - modhttp2: HTTP/2: Remote Denial of Service via compression bomb and...

MiracleLinux 9 : mod_http2-2.0.26-6.el9_8.1 (AXSA:2026-1306:02)

The remote MiracleLinux 9 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2026-1306:02 advisory. httpd: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack CVE-2026-49975 Tenable has extracted the preceding description block...

Important: Red Hat Security Advisory: httpd:2.4 security update

An update for the httpd:2.4 module is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Commo...

Important: Red Hat Security Advisory: httpd:2.4 security update

An update for the httpd:2.4 module is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerabilit...

SUSE SLED15: apache2 / apache2-devel / apache2-event / apache2-manual / etc (SUSE-SU-2026:2759-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2759-1 advisory. This update for apache2 fixes the following issues - CVE-2026-29167: modldap per-dir use-after-free bsc1267976...

SUSE-SU-2026:2717-1 Security update for apache2

This update for apache2 fixes the following issues - CVE-2026-29167: modldap per-dir use-after-free bsc1267976. - CVE-2026-29170: modproxyftp XSS bsc1267977. - CVE-2026-34355: modproxyhtml buffer overflow bsc1267978. - CVE-2026-34356: malicious backend servers can lead to a heap-based buffer...

mod_http2 security update

2.0.26-6.1 - Resolves: RHEL-182417 - modhttp2: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack CVE-2026-49975 2.0.26-6 - Resolves: RHEL-166293 - httpd: Apache HTTP Server: HTTP/2 DoS by Memory Increase CVE-2025-53020...

Important: Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.62 SP4 security update

Red Hat JBoss Core Services Apache HTTP Server 2.4.62 Service Pack 4 is now available. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Important: mod_http2

Issue Overview: Denial of service in HTTP/2 cookie request header counting CVE-2026-49975 Affected Packages: modhttp2 Note: This advisory is applicable to Amazon Linux 2 AL2 Core repository. Visit this FAQ section for the difference between AL2 Core and AL2 Extras advisories. Issue Correction: Ru...

USN-8398-3: nginx vulnerability

USN-8398-1 fixed a vulnerability in nginx. The update caused a regression and was temporarily reverted in USN-8398-2. This update introduces a complete fix for CVE-2026-49975. We apologize for the inconvenience. Original advisory details: It was discovered that nginx incorrectly handled certain...

MiracleLinux 8 : httpd:2.4 (AXSA:2026-786:01)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-786:01 advisory. httpd: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack CVE-2026-49975 Tenable has extracted the preceding description block...