Lucene search
+L

2 matches found

OSV
OSV
added 2024/04/17 2:13 a.m.20 views

MGASA-2024-0135 Updated nghttp2 packages fix security vulnerability

nghttp2 library keeps reading the unbounded number of HTTP/2 CONTINUATION frames even after a stream is reset to keep HPACK context in sync. This causes excessive CPU usage to decode HPACK stream. This update fixes the issue. This is the latest release, which will bring some more fixes and...

5.3CVSS5.5AI score0.8496EPSS
SaveExploits1References4
OSV
OSV
added 2020/04/01 1:56 a.m.7 views

MGASA-2020-0147 Updated nghttp2 packages fix security vulnerability

Malformed request header may cause route matchers or access controls to be bypassed, resulting in escalation of privileges or information disclosure CVE-2019-18802...

9.8CVSS9.5AI score0.02457EPSS
SaveExploits1References3
Rows per page
Query Builder