1112 matches found
nghttp2 < 1.7.0 DoS Vulnerability
nghttp2 is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:nghttp2:nghttp2"; if...
nghttp2 Detection (HTTP)
Detection of nghttp2 web server The script sends a connection request to the server and attempts to detect the presence of nghttp2 and to extract its version SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...
Nghttp2 Local Denial of Service Vulnerability
Nghttp2 is a C library for implementing HTTP/2. A local denial of service vulnerability exists in Nghttp2, which can be exploited by a local attacker to cause an affected application to crash and deny service to legitimate users...
openSUSE Security Update : nghttp2 (openSUSE-2016-314)
This update for nghttp2 fixes the following vulnerabilities : - CVE-2016-1544: A malicious remote attacker could have caused an Out of memory condition due to unlimited incoming HTTP header fields boo966514 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package chec...
Fedora 22 : nghttp2-1.6.0-1.fc22 (2016-8e13ac5754)
update to nghttp2-1.6.0 fixes CVE-2015-8659 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...
Fedora 23 : nghttp2-1.6.0-1.fc23 (2016-54f85ec6e8)
update to nghttp2-1.6.0 fixes CVE-2015-8659 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...
Fedora 23 : nghttp2-1.7.1-1.fc23 (2016-ac861a840e)
CVE-2016-1544: Out of memory in nghttpd, nghttp, and libnghttp2asio applications due to unlimited incoming HTTP header fields: https://github.com/tatsuhiro-t/nghttp2/releases/tag/v1.7.1 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora...
Fedora 22 : nghttp2-1.7.1-1.fc22 (2016-3d9efe44d8)
CVE-2016-1544: Out of memory in nghttpd, nghttp, and libnghttp2asio applications due to unlimited incoming HTTP header fields: https://github.com/tatsuhiro-t/nghttp2/releases/tag/v1.7.1 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora...
The vulnerability of the nghttp2 library allows attackers to trigger a service failure or execute arbitrary code.
The vulnerability of the nghttp2 library is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to cause service interruptions or execute arbitrary code...
Fedora Update for nghttp2 FEDORA-2016-3
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] Fedora 22 Update: nghttp2-1.7.1-1.fc22
This package contains the HTTP/2 client, server and proxy programs...
[SECURITY] Fedora 23 Update: nghttp2-1.7.1-1.fc23
This package contains the HTTP/2 client, server and proxy programs...
FreeBSD : nghttp2 -- Out of memory in nghttpd, nghttp, and libnghttp2_asio (07718e2b-d29d-11e5-a95f-b499baebfeaf)
Nghttp2 reports : Out of memory in nghttpd, nghttp, and libnghttp2asio applications due to unlimited incoming HTTP header fields. nghttpd, nghttp, and libnghttp2asio applications do not limit the memory usage for the incoming HTTP header field. If peer sends specially crafted HTTP/2 HEADERS frame...
nghttp2: denial of service
HTTP/2 uses HPACK to compress header fields. The basic idea is that HTTP header field is stored in the receiver with the numeric index number. The memory used by this storage is tightly constrained, and it is 4KiB by default. When sender sends the same header field, it just sends the correspondin...
nghttp2 -- Out of memory in nghttpd, nghttp, and libnghttp2_asio
Nghttp2 reports: Out of memory in nghttpd, nghttp, and libnghttp2asio applications due to unlimited incoming HTTP header fields. nghttpd, nghttp, and libnghttp2asio applications do not limit the memory usage for the incoming HTTP header field. If peer sends specially crafted HTTP/2 HEADERS frames...
FreeBSD : nghttp2 -- use after free (93eadedb-c6a6-11e5-96d6-14dae9d210b8)
nghttp2 reports : This release fixes heap-use-after-free bug in idle stream handling code. We strongly recommend to upgrade the older installation to this latest version as soon as possible. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugi...
Fedora Update for nghttp2 FEDORA-2016-8
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2015-8659
The idle stream handling in nghttp2 before 1.6.0 allows attackers to have unspecified impact via unknown vectors, aka a heap-use-after-free bug...
