nghttp2 vulnerabilities (SUSE)
12 vulnerabilities.
-
nghttp2SUSE nghttp2 nghttpx - HTTP Request/Response Smuggling via Upgrade Request with Content-Length 6.3 Medium -
nghttp2SUSE nghttp2 Denial of service: Assertion failure due to the missing state validation 7.5 High -
nghttp2SUSE Reading unbounded number of HTTP/2 CONTINUATION frames to cause excessive CPU usage 5.3 Medium -
nghttp2SUSE Envoy vulnerable to HTTP/2 memory leak in nghttp2 codec 7.5 High -
nghttp2SUSE Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations 7.5 High -
nghttp2SUSE A path traversal vulnerability exists in curl <8.0.0 SFTP implementation causes the tilde (~)... 8.8 High -
nghttp2SUSE Denial of service in nghttp2 3.7 Low -
nghttp2SUSE nghttp2 before 1.7.1 allows remote attackers to cause a denial of service (memory exhaustion). 3.3 Low -
nghttp2SUSE An issue was discovered in Envoy 1.12.0. An untrusted remote client may send an HTTP header (such... 9.8 Critical -
nghttp2SUSE Some HTTP/2 implementations are vulnerable to resource loops, potentially leading to a denial of service 7.5 High -
nghttp2SUSE Some HTTP/2 implementations are vulnerable to window size manipulation and stream prioritization manipulation, potentially leading to a denial of service 7.5 High -
nghttp2SUSE nghttp2 version >= 1.10.0 and nghttp2 <= v1.31.0 contains an Improper Input Validation CWE-20... 7.5 High