nghttp2 nghttp2 vulnerabilities and exploits

(subscribe to this query)

NA

Envoy is a cloud-native high-performance edge/middle/service proxy. Envoy’s HTTP/2 codec may leak a header map and bookkeeping structures upon receiving `RST_STREAM` immediately followed by the `GOAWAY` frames from an upstream server. In nghttp2, cleanup of pending requests...

Envoyproxy Envoy Nghttp2 Nghttp2

1 Github repository

187

VMScore

nghttp2 prior to 1.7.1 allows remote malicious users to cause a denial of service (memory exhaustion).

Nghttp2 Nghttp2 Fedoraproject Fedora 22 Fedoraproject Fedora 23

445

VMScore

nghttp2 version >= 1.10.0 and nghttp2 <= v1.31.0 contains an Improper Input Validation CWE-20 vulnerability in ALTSVC frame handling that can result in segmentation fault leading to denial of service. This attack appears to be exploitable via network client. This vulnerabil...

Nghttp2 Nghttp2 Nodejs Node.js Debian Debian Linux 9.0

890

VMScore

The idle stream handling in nghttp2 prior to 1.6.0 allows malicious users to have unspecified impact via unknown vectors, aka a heap-use-after-free bug.

Apple Mac Os X Apple Iphone Os Apple Tvos Apple Watchos Nghttp2 Nghttp2

445

VMScore

In nghttp2 before version 1.41.0, the overly large HTTP/2 SETTINGS frame payload causes denial of service. The proof of concept attack involves a malicious client constructing a SETTINGS frame with a length of 14,400 bytes (2400 individual settings entries) over and over again. T...

Nghttp2 Nghttp2 Debian Debian Linux 9.0 Debian Debian Linux 10.0 Opensuse Leap 15.1 Fedoraproject Fedora 31 Fedoraproject Fedora 33 Oracle Enterprise Communications Broker 3.1.0 Oracle Graalvm 19.3.2 Oracle Graalvm 20.1.0 Oracle Mysql Oracle Enterprise Communications Broker 3.2.0 Oracle Banking Extensibility Workbench 14.4.0 Oracle Banking Extensibility Workbench 14.3.0 Oracle Blockchain Platform Nodejs Node.js

NA

nghttp2 is an implementation of the Hypertext Transfer Protocol version 2 in C. The nghttp2 library prior to version 1.61.0 keeps reading the unbounded number of HTTP/2 CONTINUATION frames even after a stream is reset to keep HPACK context in sync. This causes excessive CPU usage...

1 Article

668

VMScore

An issue exists in certain Apple products. iOS prior to 10.3 is affected. macOS prior to 10.12.4 is affected. tvOS prior to 10.2 is affected. watchOS prior to 3.2 is affected. The issue involves nghttp2 prior to 1.17.0 in the "HTTPProtocol" component. It allows remote H...

Apple Watchos Apple Tvos Apple Iphone Os Apple Mac Os X

695

VMScore

Some HTTP/2 implementations are vulnerable to resource loops, potentially leading to a denial of service. The attacker creates multiple request streams and continually shuffles the priority of the streams in a way that causes substantial churn to the priority tree. This can consu...

1 Article

NA

An attacker can make the Node.js HTTP/2 server completely unavailable by sending a small amount of HTTP/2 frames packets with a few HTTP/2 frames inside. It is possible to leave some data in nghttp2 memory after reset when headers with HTTP/2 CONTINUATION frame are sent to the se...

1 Github repository1 Article

695

VMScore

Some HTTP/2 implementations are vulnerable to window size manipulation and stream prioritization manipulation, potentially leading to a denial of service. The attacker requests a large amount of data from a specified resource over multiple streams. They manipulate window size and...

1 Article

Get Started

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook