737 matches found
CVE-2026-49975
CVE-2026-49975 HTTP/2 ボム ★ CVE-2026-49975 HTTP/2 ボム PoC ★ 概要 CVE-2026-49975 は Apache HTTP Server における Denial of Service DoS 脆弱性です。 この脆弱性は HTTP/2 のリクエスト処理経路で発生し、複数の cookie ヘッダーフィールドが LimitRequestFields に対して適切にカウントされずにマージされる可能性があります。 攻撃者は、小さな HPACK エンコードされた HTTP/2 リクエストを送信することで、多くの cookie...
http2-bomb-detector
http2-bomb-detector HTTP/2 Bomb CVE-2026-49975 非破壊的脆弱性検出ツール — Nginx / Apache httpd 向け 脆弱性の背景 CVE-2026-49975 は、広範囲に影響を及ぼす HTTP/2 プロトコル層のリモートサービス拒否脆弱性であり、セキュリティ研究者の Quang Luong によって発見されました。この脆弱性は HPACK ヘッダー圧縮 と フロー制御メカニズム の組み合わせによる設計上の欠陥を悪用し、攻撃者は認証なしで 10～20 秒以内にサーバーの 32GB メモリを枯渇させることができます。 CVSS 3.1...
BIT-ENVOY-2026-73550 Envoy: HTTP/2 Discarded Host Header 200 GB Header-Copy OOM in Envoy
Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1, Envoy copies every decoded HTTP/2 Host header value before discarding it when :authority is already present. The discarded value bypasses saveHeader, so its bytes a...
CVE-2026-49975
CVE-2026-49975 HTTP/2 Bomb PoC HTTP/2 远程拒绝服务漏洞复现工具 漏洞概述 CVE-2026-49975 是一个影响主流 Web 服务器的 HTTP/2 拒绝服务漏洞。该漏洞由安全公司 Calif（使用 OpenAI Codex）于 2026 年 6 月初发现。 攻击原理 1. HPACK 压缩炸弹 ：将极小的 header（如 "x: a"）插入服务器 HPACK 动态表，然后发送成千上万个 1-byte 的索引引用。每个引用迫使服务器分配大量簿记内存，但客户端只消耗极少带宽。内存放大比例可达 5700:1 （Envoy）和 4000:1 （Apac...
CVE-2026-49975
CVE-2026-49975 HTTP/2 爆弾再現ツール 作者 : polar bear バージョン : 2.1 対象脆弱性 : CVE-2026-49975（HTTP/2 プロトコルメモリ爆弾） 📖 脆弱性の原理 CVE-2026-49975 は HTTP/2 プロトコル実装におけるメモリ枯渇脆弱性であり、攻撃チェーンは以下の2つの重要なステップで構成されます： 1. HPACK圧縮爆弾 ：単一のHTTP/2ストリームで同じヘッダー（例：x-bomb: test）を繰り返し送信し、サーバーに各参照に対して完全なメモリ構造を割り当てさせ、4000:1以上のメモリ増幅 を実現します。 2...
CLEANSTART-2026-UP28744 malformed `HTTP/2 HEADERS` frame with oversized, invalid `HPACK` data can cause Node
Security vulnerability affects the apache-superset package. A malformed HTTP/2 HEADERS frame with oversized, invalid HPACK data can cause Node...
CLEANSTART-2026-MM56894 Allocation of resources without limits or throttling in the HTTP/2 HPACK decoder in Apache HttpComponents Core (5
Security vulnerability affects the sonarqube package. Allocation of resources without limits or throttling in the HTTP/2 HPACK decoder in Apache HttpComponents Core 5...
CLEANSTART-2026-WU74095 hpack is an HTTP/2 Header Encoding for Python
Security vulnerability affects the airflow-3 package. hpack is an HTTP/2 Header Encoding for Python...
Debian dsa-6529 : libwebsockets-dev - security update
The remote Debian 13 host has packages installed that are affected by a vulnerability as referenced in the dsa-6529 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6529-1 [email protected] https://www.debian.org/security/ Moritz...
SUSE CVE-2026-59980
hpack is an HTTP/2 Header Encoding for Python. Prior to version 4.2.0, unbounded variable integer decoding can cause run-away computation on malformed input leading to On^2 runtime, effectively blocking further processing with large enough unsanitized input. A fix is available in python-hyper/hpa...
http2-bomb
HTTP/2 炸弹 - CVE-2026-49975 一个针对 HTTP/2 服务器的拒绝服务（DoS）概念验证。通过将 HPACK 放大与流保持相结合，一台拥有普通网络连接的机器即可在数秒内使存在漏洞的服务器不可用。 漏洞 CVE： CVE-2026-49975 标题： Apache HTTP Server：modhttp2 拒绝服务 官方描述： Apache HTTP Server 的 modhttp2 模块中存在一个过大内存分配漏洞（CWE-789），允许通过特制的 HTTP 请求发起拒绝服务攻击。 受影响版本： Apache HTTP Server 2.4.17 至 2.4.67...
CVE-2026-91043
The elixir-mint mint HTTP client (versions 1.1.0 before 1.11.0 ) is vulnerable to a denial of service via memory exhaustion. The root cause is that Mint.HTTP2 only enforces the max_header_list_size on the compressed size of inbound header blocks, rather than the decoded list size as required by R...
CVE-2026-91043 HPACK-indexed cookie fields in Mint HTTP/2 responses bypass max_header_list_size and exhaust client memory
Allocation of Resources Without Limits or Throttling vulnerability in elixir-mint mint allows a malicious HTTP/2 server to exhaust memory on the client host and cause a denial of service. Mint.HTTP2 enforces the client's maxheaderlistsize setting only on the compressed size of an inbound header...
CVE-2026-91043 HPACK-indexed cookie fields in Mint HTTP/2 responses bypass max_header_list_size and exhaust client memory
Allocation of Resources Without Limits or Throttling vulnerability in elixir-mint mint allows a malicious HTTP/2 server to exhaust memory on the client host and cause a denial of service. Mint.HTTP2 enforces the client's maxheaderlistsize setting only on the compressed size of an inbound header...
EUVD-2026-88218
Allocation of Resources Without Limits or Throttling vulnerability in elixir-mint mint allows a malicious HTTP/2 server to exhaust memory on the client host and cause a denial of service. Mint.HTTP2 enforces the client's maxheaderlistsize setting only on the compressed size of an inbound header...
EEF-CVE-2026-91043 HPACK-indexed cookie fields in Mint HTTP/2 responses bypass max_header_list_size and exhaust client memory
Summary Allocation of Resources Without Limits or Throttling vulnerability in elixir-mint mint allows a malicious HTTP/2 server to exhaust memory on the client host and cause a denial of service. Mint.HTTP2 enforces the client's maxheaderlistsize setting only on the compressed size of an inbound...
CVE-2026-91043 HPACK-indexed cookie fields in Mint HTTP/2 responses bypass max_header_list_size and exhaust client memory
Allocation of Resources Without Limits or Throttling vulnerability in elixir-mint mint allows a malicious HTTP/2 server to exhaust memory on the client host and cause a denial of service. Mint.HTTP2 enforces the client's maxheaderlistsize setting only on the compressed size of an inbound header...
Linux Distros Unpatched Vulnerability : CVE-2026-59980
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - hpack is an HTTP/2 Header Encoding for Python. Prior to version 4.2.0, unbounded variable integer decoding can cause run-away computation on malformed input...
GHSA-8V8H-HG4W-MVQ2 hpack: Unbounded variable integer decoding can cause run-away computation on malformed input
Impact Users of the python-hyper/hpack library, most commonly used as downstream dependency of the python-hyper/h2 library an HTTP/2 client and server implementation. Unbounded variable integer decoding can cause run-away computation on malformed input leading to On^2 runtime, effectively blockin...