CVE-2024-3302

There was no limit to the number of HTTP/2 CONTINUATION frames that would be processed. A server could abuse this to create an Out of Memory condition in the browser. This vulnerability affects Firefox 125, Firefox ESR 115.10, and Thunderbird 115.10...

UBUNTU-CVE-2024-3302

There was no limit to the number of HTTP/2 CONTINUATION frames that would be processed. A server could abuse this to create an Out of Memory condition in the browser. This vulnerability affects Firefox 125, Firefox ESR 115.10, and Thunderbird 115.10...

CVE-2024-3302

There was no limit to the number of HTTP/2 CONTINUATION frames that would be processed. A server could abuse this to create an Out of Memory condition in the browser. This vulnerability affects Firefox 125, Firefox ESR 115.10, and Thunderbird 115.10...

CVE-2024-3302

CVE-2024-3302 describes an unbounded processing of HTTP/2 CONTINUATION frames, enabling an Out of Memory condition in the browser. Affected: Firefox <125, Firefox ESR <115.10, Thunderbird

Mozilla Firefox 安全漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security vulnerability exists in Mozilla Firefox version 125, which stems from a lack of a limit on the number of HTTP/2 CONTINUATION frames that need to be processed, which could lead to memory...

Security Vulnerabilities fixed in Firefox 125 — Mozilla

GetBoundName could return the wrong version of an object when JIT optimizations were applied. Memory corruption in the networking stack could have led to a potentially exploitable crash. A use-after-free could result if a JavaScript realm was in the process of being initialized when a garbage...

Fireboltt Dream Wristphone 安全漏洞

Fireboltt Dream Wristphone is a smartwatch phone from Fireboltt. A security vulnerability exists in Fireboltt Dream Wristphone version BSW202FBAACv2.020240110-20240110-1956, which stems from a vulnerability that allows an attacker to cause a denial of service via a crafted de-authentication frame...

Updated golang packages fix security vulnerability

CVE-2023-45288: An attacker may cause an HTTP/2 endpoint to read arbitrary amounts of header data by sending an excessive number of CONTINUATION frames. Maintaining HPACK state requires parsing and processing all HEADERS and CONTINUATION frames on a connection. When a request's headers exceed...

OESA-2024-1389 nghttp2 security update

The framing layer of HTTP/2 is implemented as a form of reusable C library. On top of that, we have implemented HTTP/2 client, server and proxy. We have also developed load test and benchmarking tool for HTTP/2. Security Fixes: nghttp2 is an implementation of the Hypertext Transfer Protocol versi...

httpd: CONTINUATION frames DoS

A vulnerability was found in how Apache httpd implements the HTTP/2 protocol. There are insufficient limitations placed on the amount of CONTINUATION frames that can be sent within a single stream. This issue could allow an unauthenticated remote attacker to send packets to vulnerable servers,...

Important: httpd:2.4/mod_http2 security update

The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server. Security Fixes: httpd: modhttp2: CONTINUATION frames DoS CVE-2024-27316 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other related...

httpd:2.4/mod_http2 security update

httpd modhttp2 1.15.7-8.5 - Resolves: RHEL-29816 - httpd:2.4/modhttp2: httpd: CONTINUATION frames DoS CVE-2024-27316 modmd...

UBUNTU-CVE-2024-31309

HTTP/2 CONTINUATION DoS attack can cause Apache Traffic Server to consume more resources on the server. Version from 8.0.0 through 8.1.9, from 9.0.0 through 9.2.3 are affected. Users can set a new setting proxy.config.http2.maxcontinuationframesperminute to limit the number of CONTINUATION frames...

CVE-2024-31309 Apache Traffic Server: HTTP/2 CONTINUATION frames can be utilized for DoS attack

HTTP/2 CONTINUATION DoS attack can cause Apache Traffic Server to consume more resources on the server. Version from 8.0.0 through 8.1.9, from 9.0.0 through 9.2.3 are affected. Users can set a new setting proxy.config.http2.maxcontinuationframesperminute to limit the number of CONTINUATION frames...

K000139229: Tempesta vulnerability CVE-2024-2758

Security Advisory Description Tempesta FW rate limits are not enabled by default. They are either set too large to capture empty CONTINUATION frames attacks or too small to handle normal HTTP requests appropriately. CVE-2024-2758 Impact There is no impact; F5 products are not affected by this...

CVE-2024-30191

A vulnerability has been identified in SCALANCE W1748-1 M12 6GK5748-1GY01-0AA0, SCALANCE W1748-1 M12 6GK5748-1GY01-0TA0, SCALANCE W1788-1 M12 6GK5788-1GY01-0AA0, SCALANCE W1788-2 EEC M12 6GK5788-2GY01-0TA0, SCALANCE W1788-2 M12 6GK5788-2GY01-0AA0, SCALANCE W1788-2IA M12 6GK5788-2HY01-0AA0, SCALAN...

CVE-2024-30191

A vulnerability has been identified in SCALANCE W1748-1 M12 6GK5748-1GY01-0AA0, SCALANCE W1748-1 M12 6GK5748-1GY01-0TA0, SCALANCE W1788-1 M12 6GK5788-1GY01-0AA0, SCALANCE W1788-2 EEC M12 6GK5788-2GY01-0TA0, SCALANCE W1788-2 M12 6GK5788-2GY01-0AA0, SCALANCE W1788-2IA M12 6GK5788-2HY01-0AA0, SCALAN...

CVE-2024-30191

A vulnerability has been identified in SCALANCE W1748-1 M12 6GK5748-1GY01-0AA0, SCALANCE W1748-1 M12 6GK5748-1GY01-0TA0, SCALANCE W1788-1 M12 6GK5788-1GY01-0AA0, SCALANCE W1788-2 EEC M12 6GK5788-2GY01-0TA0, SCALANCE W1788-2 M12 6GK5788-2GY01-0AA0, SCALANCE W1788-2IA M12 6GK5788-2HY01-0AA0, SCALAN...

CVE-2024-30191

CVE-2024-30191 (and related entries CVE-2022-47522 lineage) affects Siemens SCALANCE W700/W721/W722/W734/W738/W748/W761/W774/W778/W786/WAM/WUM/WUM766 family and similar models, describing an override of a victim’s security context in 802.11 frames. The root cause: an attacker physically nearby ca...

An attacker can make the Node.js HTTP/2 server completely unavailable by sending a small amount of HTTP/2 frames packets with a few HTTP/2 frames inside. It is possible to leave some data in nghttp2 memory after reset when headers with HTTP/2 CONTINUATION frame are sent to the server and then a TCP connection is abruptly closed by the client triggering the Http2Session destructor while header frames are still being processed (and stored in memory) causing a race condition.

...