Fedora: Security Advisory for nghttp2 (FEDORA-2020-47efc31973)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora 31 : 1:libuv / 1:nodejs / nghttp2 (2020-3838c8ea98)

Update to Node.js 12.15.0 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Network...

[SECURITY] Fedora 31 Update: nghttp2-1.40.0-1.fc31

This package contains the HTTP/2 client, server and proxy programs...

Fedora: Security Advisory for nghttp2 (FEDORA-2020-3838c8ea98)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2016-1544

nghttp2 before 1.7.1 allows remote attackers to cause a denial of service memory exhaustion...

DEBIAN-CVE-2016-1544

nghttp2 before 1.7.1 allows remote attackers to cause a denial of service memory exhaustion...

CVE-2016-1544

nghttp2 before 1.7.1 allows remote attackers to cause a denial of service memory exhaustion...

UBUNTU-CVE-2016-1544

nghttp2 before 1.7.1 allows remote attackers to cause a denial of service memory exhaustion...

CVE-2016-1544

nghttp2 before 1.7.1 allows remote attackers to cause a denial of service memory exhaustion...

Design/Logic Flaw

nghttp2 before 1.7.1 allows remote attackers to cause a denial of service memory exhaustion...

CVE-2016-1544

CVE-2016-1544 affects nghttp2 up to version 1.7.0, where remote attackers could exhaust memory by sending unlimited incoming HTTP header fields, causing Denial of Service. Connected documents confirm the root cause as unbounded header field processing and show remediation through upgrading to ngh...

CVE-2016-1544

nghttp2 before 1.7.1 allows remote attackers to cause a denial of service memory exhaustion...

CVE-2016-1544

nghttp2 before 1.7.1 allows remote attackers to cause a denial of service memory exhaustion...

CVE-2016-1544

nghttp2 before 1.7.1 allows remote attackers to cause a denial of service memory exhaustion...

CVE-2016-1544: Uncontrolled Resource Consumption

nghttp2 before 1.7.1 allows remote attackers to cause a denial of service memory exhaustion...

PT-2020-4061

Name of the Vulnerable Software and Affected Versions: nghttp2 versions prior to 1.41.0 Description: The issue is related to the handling of HTTP/2 SETTINGS frames in nghttp2, where an overly large frame payload can cause a denial of service. A malicious client can construct a SETTINGS frame with...

Huawei EulerOS: Security Advisory for nghttp2 (EulerOS-SA-2019-2083)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE: Security Advisory for nghttp2 (openSUSE-SU-2019:2232-1)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

RHEL 6 : Red Hat JBoss Core Services Apache HTTP Server 2.4.37 Security Release on RHEL 6 (Important) (RHSA-2019:3932)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:3932 advisory. This release adds the new Apache HTTP Server 2.4.37 packages that are part of the JBoss Core Services offering. This release serves as a...

Important: Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.37 Security Release on RHEL 6

Updated packages that provide Red Hat JBoss Core Services Pack Apache Server 2.4.37 and fix several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability...