nghttp2 vulnerabilities (Debian)
10 vulnerabilities.
-
nghttp2Debian nghttp2 nghttpx - HTTP Request/Response Smuggling via Upgrade Request with Content-Length 6.3 Medium -
nghttp2Debian nghttp2 Denial of service: Assertion failure due to the missing state validation 7.5 High -
nghttp2Debian Reading unbounded number of HTTP/2 CONTINUATION frames to cause excessive CPU usage 5.3 Medium -
nghttp2Debian Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations 7.5 High -
nghttp2Debian Denial of service in nghttp2 3.7 Low -
nghttp2Debian nghttp2 before 1.7.1 allows remote attackers to cause a denial of service (memory exhaustion). 3.3 Low -
nghttp2Debian Some HTTP/2 implementations are vulnerable to resource loops, potentially leading to a denial of service 7.5 High -
nghttp2Debian Some HTTP/2 implementations are vulnerable to window size manipulation and stream prioritization manipulation, potentially leading to a denial of service 7.5 High -
nghttp2Debian nghttp2 version >= 1.10.0 and nghttp2 <= v1.31.0 contains an Improper Input Validation CWE-20... 7.5 High -
nghttp2Debian The idle stream handling in nghttp2 before 1.6.0 allows attackers to have unspecified impact via... 10.0 Critical