nghttp2 vulnerabilities (Ubuntu)
8 vulnerabilities.
-
nghttp2Ubuntu nghttp2 nghttpx - HTTP Request/Response Smuggling via Upgrade Request with Content-Length 6.3 Medium -
nghttp2Ubuntu nghttp2 Denial of service: Assertion failure due to the missing state validation 7.5 High -
nghttp2Ubuntu Reading unbounded number of HTTP/2 CONTINUATION frames to cause excessive CPU usage 5.3 Medium -
nghttp2Ubuntu Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations 7.5 High -
nghttp2Ubuntu Denial of service in nghttp2 3.7 Low -
nghttp2Ubuntu Some HTTP/2 implementations are vulnerable to resource loops, potentially leading to a denial of service 7.5 High -
nghttp2Ubuntu Some HTTP/2 implementations are vulnerable to window size manipulation and stream prioritization manipulation, potentially leading to a denial of service 7.5 High -
nghttp2Ubuntu nghttp2 version >= 1.10.0 and nghttp2 <= v1.31.0 contains an Improper Input Validation CWE-20... 7.5 High