2 matches found
MGASA-2024-0135 Updated nghttp2 packages fix security vulnerability
nghttp2 library keeps reading the unbounded number of HTTP/2 CONTINUATION frames even after a stream is reset to keep HPACK context in sync. This causes excessive CPU usage to decode HPACK stream. This update fixes the issue. This is the latest release, which will bring some more fixes and...
MGASA-2020-0147 Updated nghttp2 packages fix security vulnerability
Malformed request header may cause route matchers or access controls to be bypassed, resulting in escalation of privileges or information disclosure CVE-2019-18802...