h2o vulnerabilities (Ubuntu)
20 vulnerabilities.
-
h2oUbuntu h2o: heap exhaustion using capsules 7.5 High -
h2oUbuntu h2o: buffer overflow when using the %{error}x log directive 8.1 High -
h2oUbuntu h2o has HTTP/2 state amplification 7.5 High -
h2oUbuntu h2o is vulnerable to musl libc stack overflow 7.5 High -
h2oUbuntu h2o is vulnerable to heap overrun 5.9 Medium -
h2oUbuntu h2o: musl libc stack overflow (QPACK) 7.5 High -
h2oUbuntu CVE-2025-8671 7.5 High -
h2oUbuntu H2O assertion failure when HTTP/3 requests are cancelled 3.7 Low -
h2oUbuntu H2O alllows bypassing address-based access control with 0-RTT 5.9 Medium -
h2oUbuntu H2O ignores headers configuration directives 3.1 Low -
h2oUbuntu h2o vulnerable to TLS session resumption misdirection 6.1 Medium -
h2oUbuntu Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations 7.5 High -
h2oUbuntu H2O vulnerable to read from uninitialized pointer in the reverse proxy handler 8.2 High -
h2oUbuntu Unititialized memory access in h2o 7.4 High -
h2oUbuntu NULL Pointer Dereference in mruby/mruby 5.5 Medium -
h2oUbuntu NULL Pointer Dereference in mruby/mruby 6.2 Medium -
h2oUbuntu Some HTTP/2 implementations are vulnerable to a settings flood, potentially leading to a denial of service 7.5 High -
h2oUbuntu Some HTTP/2 implementations are vulnerable to a reset flood, potentially leading to a denial of service 7.5 High -
h2oUbuntu Some HTTP/2 implementations are vulnerable to ping floods, potentially leading to a denial of service 7.5 High -
h2oUbuntu Buffer overflow in H2O version 2.2.4 and earlier allows remote attackers to execute arbitrary... 9.8 Critical