2 matches found
Design/Logic Flaw
HTTP/2 2.4.20 through 2.4.39 very early pushes, for example configured with "H2PushResource", could lead to an overwrite of memory in the pushing request's pool, leading to crashes. The memory copied is that of the configured push link header values, not data supplied by the client...
5CVSS8.1AI score0.14563EPSS
SaveExploits1References21Affected Software2
CVE-2019-10081
HTTP/2 2.4.20 through 2.4.39 very early pushes, for example configured with "H2PushResource", could lead to an overwrite of memory in the pushing request's pool, leading to crashes. The memory copied is that of the configured push link header values, not data supplied by the client...
8.3AI score0.14563EPSS
SaveExploits1References21
20