Buffer overflow

Buffer overflow in H2O version 2.2.2 and earlier allows remote attackers to cause a denial-of-service in the server via unspecified vectors...

CVE-2017-10869

Buffer overflow in H2O version 2.2.2 and earlier allows remote attackers to cause a denial-of-service in the server via unspecified vectors...

CVE-2017-10868

H2O version 2.2.2 and earlier allows remote attackers to cause a denial of service in the server via specially crafted HTTP/1 header...

CVE-2017-10908

H2O version 2.2.3 and earlier allows remote attackers to cause a denial of service in the server via specially crafted HTTP/2 header...

Design/Logic Flaw

H2O version 2.2.2 and earlier allows remote attackers to cause a denial of service in the server via specially crafted HTTP/1 header...

Design/Logic Flaw

H2O version 2.2.3 and earlier allows remote attackers to cause a denial of service in the server via specially crafted HTTP/2 header...

UBUNTU-CVE-2017-10872

H2O version 2.2.3 and earlier allows remote attackers to cause a denial of service in the server via unspecified vectors...

UBUNTU-CVE-2017-10908

H2O version 2.2.3 and earlier allows remote attackers to cause a denial of service in the server via specially crafted HTTP/2 header...

CVE-2017-10868

CVE-2017-10868 affects H2O Web Server (2.2.2 and earlier). DoS can be triggered remotely by a specially crafted HTTP/1 header, impacting availability. Affected product: H2O; root cause: flaw in HTTP/1 header processing. Remediation: update to the latest version (e.g., 2.2.3 or later) as advised b...

CVE-2017-10872

The CVE-2017-10872 entry concerns the H2O HTTP Server. Affected: H2O versions 2.2.3 and earlier. Issue: remote attackers can cause a denial of service in the server via unspecified vectors. Root cause details are not provided in the sources. Impact is described as denial of service (availability ...

CVE-2017-10869

H2O HTTP Server vulnerability CVE-2017-10869 is a stack-based buffer overflow affecting H2O versions 2.2.2 and earlier. The flaw allows remote unauthenticated attackers to cause a denial-of-service via unspecified vectors. Connected sources specify multiple DoS-related CVEs in H2O and indicate th...

CVE-2017-10868

H2O version 2.2.2 and earlier allows remote attackers to cause a denial of service in the server via specially crafted HTTP/1 header...

CVE-2017-10869

Buffer overflow in H2O version 2.2.2 and earlier allows remote attackers to cause a denial-of-service in the server via unspecified vectors...

CVE-2017-10908

H2O version 2.2.3 and earlier allows remote attackers to cause a denial of service in the server via specially crafted HTTP/2 header...

CVE-2017-10868

H2O version 2.2.2 and earlier allows remote attackers to cause a denial of service in the server via specially crafted HTTP/1 header...

CVE-2017-10908

H2O version 2.2.3 and earlier allows remote attackers to cause a denial of service in the server via specially crafted HTTP/2 header...

CVE-2017-10872

H2O version 2.2.3 and earlier allows remote attackers to cause a denial of service in the server via unspecified vectors...

CVE-2017-10908

CVE-2017-10908 affects the H2O HTTP Server (versions

CVE-2017-10869

Buffer overflow in H2O version 2.2.2 and earlier allows remote attackers to cause a denial-of-service in the server via unspecified vectors...

Multiple vulnerabilities in H2O

Overview H2O is an open source web server software. H2O contains multiple vulnerabilities listed below. A Denial-of-service DoS due to a flaw in processing HTTP/1 header CWE-20 - CVE-2017-10868 Stack-based buffer overflow CWE-121 - CVE-2017-10869 A Denial-of-service DoS due to a flaw in outputtin...