1112 matches found
Important: nghttp2
Issue Overview: In nghttp2 before version 1.41.0, the overly large HTTP/2 SETTINGS frame payload causes denial of service. The proof of concept attack involves a malicious client constructing a SETTINGS frame with a length of 14,400 bytes 2400 individual settings entries over and over again. The...
RHEL 8 : nghttp2 (RHSA-2020:2755)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:2755 advisory. libnghttp2 is a library implementing the Hypertext Transfer Protocol version 2 HTTP/2 protocol in C. Security Fixes: nghttp2: overly large SETTINGS...
Oracle Linux 8 : nghttp2 (ELSA-2020-2755)
The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-2755 advisory. - prevent DoS caused by overly large SETTINGS frames CVE-2020-11080 Tenable has extracted the preceding description block directly from the Oracle Linux securit...
Photon OS 1.0: Nghttp2 PHSA-2020-1.0-0304
An update of the nghttp2 package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-1.0-0304. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Important: Red Hat Security Advisory: nghttp2 security update
An update for nghttp2 is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...
nghttp2: overly large SETTINGS frames can lead to DoS
A resource consumption vulnerability was found in nghttp2. This flaw allows an attacker to repeatedly construct an overly large HTTP/2 SETTINGS frame with a length of 14,400 bytes that causes excessive CPU usage, leading to a denial of service...
RLSA-2020:2755 Important: nghttp2 security update
libnghttp2 is a library implementing the Hypertext Transfer Protocol version 2 HTTP/2 protocol in C. Security Fixes: nghttp2: overly large SETTINGS frames can lead to DoS CVE-2020-11080 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other...
ALSA-2020:2755 Important: nghttp2 security update
libnghttp2 is a library implementing the Hypertext Transfer Protocol version 2 HTTP/2 protocol in C. Security Fixes: nghttp2: overly large SETTINGS frames can lead to DoS CVE-2020-11080 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other...
Important: nghttp2 security update
libnghttp2 is a library implementing the Hypertext Transfer Protocol version 2 HTTP/2 protocol in C. Security Fixes: nghttp2: overly large SETTINGS frames can lead to DoS CVE-2020-11080 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other...
nghttp2 security update
An update is available for nghttp2. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list libnghttp2 is a library implementing the Hypertext Transfer Protocol version ...
Photon OS 3.0: Nghttp2 PHSA-2020-3.0-0105
An update of the nghttp2 package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-3.0-0105. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid137778;...
Critical Photon OS Security Update - PHSA-2020-0105
Updates of 'nghttp2', 'gettext' packages of Photon OS have been released...
Critical Photon OS Security Update - PHSA-2020-3.0-0105
Updates of 'gettext', 'nghttp2' packages of Photon OS have been released...
Fedora: Security Advisory for nghttp2 (FEDORA-2020-f7d15c8b77)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
nghttp2: overly large SETTINGS frames can lead to DoS
A resource consumption vulnerability was found in nghttp2. This flaw allows an attacker to repeatedly construct an overly large HTTP/2 SETTINGS frame with a length of 14,400 bytes that causes excessive CPU usage, leading to a denial of service...
nghttp2: overly large SETTINGS frames can lead to DoS
A resource consumption vulnerability was found in nghttp2. This flaw allows an attacker to repeatedly construct an overly large HTTP/2 SETTINGS frame with a length of 14,400 bytes that causes excessive CPU usage, leading to a denial of service...
RHEL 6 / 7 : Red Hat JBoss Core Services Apache HTTP Server 2.4.37 SP3 (RHSA-2020:2644)
The remote Redhat Enterprise Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:2644 advisory. This release adds the new Apache HTTP Server 2.4.37 Service Pack 3 packages that are part of the JBoss Core Services offering. This...
Photon OS 2.0: Nghttp2 PHSA-2020-2.0-0254
An update of the nghttp2 package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-2.0-0254. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Fedora 31 : nghttp2 (2020-f7d15c8b77)
update to the latest upstream release CVE-2020-11080 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...