K000148694: nghttp2 vulnerabilities CVE-2023-35945 and CVE-2020-11080

Security Advisory Description CVE-2023-35945 Envoy is a cloud-native high-performance edge/middle/service proxy. Envoy’s HTTP/2 codec may leak a header map and bookkeeping structures upon receiving RSTSTREAM immediately followed by the GOAWAY frames from an upstream server. In nghttp2, cleanup of...

CVE-2024-28182 affecting package nghttp2 for versions less than 1.57.0-2

CVE-2024-28182 affecting package nghttp2 for versions less than 1.57.0-2. A patched version of the package is available...

Huawei EulerOS: Security Advisory for nghttp2 (EulerOS-SA-2024-2673)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for nghttp2 (EulerOS-SA-2024-2639)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle HTTP Server (October 2024 CPU)

The versions of HTTP Server installed on the remote host are affected by multiple vulnerabilities as referenced in the October 2024 CPU advisory. - Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware component: Web Listener OpenSSL. The supported version that is affected i...

RHSA-2023:6746 Red Hat Security Advisory: nghttp2 security update

Bulletin has no description...

RHSA-2023:5837 Red Hat Security Advisory: nghttp2 security update

Bulletin has no description...

RHSA-2023:5841 Red Hat Security Advisory: httpd24-nghttp2 security update

Bulletin has no description...

RHSA-2023:5838 Red Hat Security Advisory: nghttp2 security update

Bulletin has no description...

RHSA-2023:5767 Red Hat Security Advisory: nghttp2 security update

Bulletin has no description...

RHSA-2023:5768 Red Hat Security Advisory: nghttp2 security update

Bulletin has no description...

RHSA-2023:5766 Red Hat Security Advisory: nghttp2 security update

Bulletin has no description...

RHSA-2023:5769 Red Hat Security Advisory: nghttp2 security update

Bulletin has no description...

RHSA-2023:5770 Red Hat Security Advisory: nghttp2 security update

Bulletin has no description...

Debian: Security Advisory (DLA-3898-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 3898-1] nghttp2 security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3898-1 [email protected] https://www.debian.org/lts/security/ Adrian Bunk September 27, 2024 https://wiki.debian.org/LTS -...

DLA-3898-1 nghttp2 - security update

Bulletin has no description...

Debian dla-3898 : libnghttp2-14 - security update

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dla-3898 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3898-1 [email protected] https://www.debian.org/lts/security/...

EulerOS 2.0 SP8 : mod_http2 (EulerOS-SA-2024-2480)

According to the versions of the modhttp2 package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : HTTP/2 incoming headers exceeding the limit are temporarily buffered in nghttp2 in order to generate an informative HTTP 413 response. If a clien...

EulerOS 2.0 SP8 : nghttp2 (EulerOS-SA-2024-2481)

According to the versions of the nghttp2 package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : nghttp2 is an implementation of the Hypertext Transfer Protocol version 2 in C. The nghttp2 library prior to version 1.61.0 keeps reading the...