h2o vulnerabilities (Debian)
19 vulnerabilities.
-
h2oDebian h2o: heap exhaustion using capsules 7.5 High -
h2oDebian h2o: buffer overflow when using the %{error}x log directive 8.1 High -
h2oDebian h2o has HTTP/2 state amplification 7.5 High -
h2oDebian h2o is vulnerable to musl libc stack overflow 7.5 High -
h2oDebian h2o is vulnerable to heap overrun 5.9 Medium -
h2oDebian h2o: musl libc stack overflow (QPACK) 7.5 High -
h2oDebian CVE-2025-8671 7.5 High -
h2oDebian H2O alllows bypassing address-based access control with 0-RTT 5.9 Medium -
h2oDebian H2O ignores headers configuration directives 3.1 Low -
h2oDebian h2o vulnerable to TLS session resumption misdirection 6.1 Medium -
h2oDebian Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations 7.5 High -
h2oDebian Some HTTP/2 implementations are vulnerable to a settings flood, potentially leading to a denial of service 7.5 High -
h2oDebian Some HTTP/2 implementations are vulnerable to a reset flood, potentially leading to a denial of service 7.5 High -
h2oDebian Some HTTP/2 implementations are vulnerable to ping floods, potentially leading to a denial of service 7.5 High -
h2oDebian Buffer overflow in H2O version 2.2.4 and earlier allows remote attackers to execute arbitrary... 9.8 Critical -
h2oDebian H2O version 2.2.3 and earlier allows remote attackers to cause a denial of service in the server... 7.5 High -
h2oDebian H2O version 2.2.3 and earlier allows remote attackers to cause a denial of service in the server... 6.5 Medium -
h2oDebian Buffer overflow in H2O version 2.2.2 and earlier allows remote attackers to cause a denial-of... 7.5 High -
h2oDebian H2O version 2.2.2 and earlier allows remote attackers to cause a denial of service in the server... 7.5 High