CVE-2015-8659

The idle stream handling in nghttp2 before 1.6.0 allows attackers to have unspecified impact via unknown vectors, aka a heap-use-after-free bug...

[SECURITY] Fedora 22 Update: nghttp2-1.6.0-1.fc22

This package contains the HTTP/2 client, server and proxy programs...

CVE-2015-8659: Improper Restriction of Operations within the Bounds of a Memory Buffer

The idle stream handling in nghttp2 before 1.6.0 allows attackers to have unspecified impact via unknown vectors, aka a heap-use-after-free bug...

Apple iOS HTTPProtocol Remote Code Execution Vulnerability

iOS is an operating system developed by Apple for mobile devices, and supported devices include iPhone, iPod touch, iPad, and Apple TV. A security vulnerability exists in the implementation of the HTTPProtocol in iOS versions prior to 9.3 in nghttp2 versions prior to 1.6.0, which can lead to the...

Fedora Update for nghttp2 FEDORA-2016-54

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 23 Update: nghttp2-1.6.0-1.fc23

This package contains the HTTP/2 client, server and proxy programs...

nghttp2: use-after-free

nghttp2 1.6.0 fixes a heap-based use-after-free bug in idle stream handling code, where an idle/closed stream could possibly be destroyed while it was still referenced...

PT-2016-1246

Name of the Vulnerable Software and Affected Versions nghttp2 versions prior to 1.6.0 Description The issue is related to idle stream handling in nghttp2, which allows attackers to have an unspecified impact via unknown vectors. This is also known as a heap-use-after-free bug, which can lead to...

nghttp2 -- use after free

nghttp2 reports: This release fixes heap-use-after-free bug in idle stream handling code. We strongly recommend to upgrade the older installation to this latest version as soon as possible...