CVE-2020-11080 vulnerabilities and exploits

(subscribe to this query)

In nghttp2 before version 1.41.0, the overly large HTTP/2 SETTINGS frame payload causes denial of service. The proof of concept attack involves a malicious client constructing a SETTINGS frame with a length of 14,400 bytes (2400 individual settings entries) over and over again. T...

Nghttp2 Nghttp2 Debian Debian Linux 9.0 Debian Debian Linux 10.0 Opensuse Leap 15.1 Fedoraproject Fedora 31 Fedoraproject Fedora 33 Oracle Enterprise Communications Broker 3.1.0 Oracle Graalvm 19.3.2 Oracle Graalvm 20.1.0 Oracle Mysql Oracle Enterprise Communications Broker 3.2.0 Oracle Banking Extensibility Workbench 14.4.0 Oracle Banking Extensibility Workbench 14.3.0 Oracle Blockchain Platform Nodejs Node.js

TLS session reuse can lead to host certificate verification bypass in node version < 12.18.0 and < 14.4.0.

Nodejs Node.js Oracle Graalvm 19.3.2 Oracle Graalvm 20.1.0 Oracle Banking Extensibility Workbench 14.4.0 Oracle Banking Extensibility Workbench 14.3.0 Oracle Mysql Cluster Oracle Blockchain Platform

napi_get_value_string_*() allows various kinds of memory corruption in node < 10.21.0, 12.18.0, and < 14.4.0.

Nodejs Node.js Oracle Banking Extensibility Workbench 14.4.0 Oracle Banking Extensibility Workbench 14.3.0 Oracle Retail Xstore Point Of Service 16.0.6 Oracle Retail Xstore Point Of Service 17.0.4 Oracle Retail Xstore Point Of Service 18.0.3 Oracle Retail Xstore Point Of Service 19.0.2 Oracle Retail Xstore Point Of Service 20.0.1 Oracle Mysql Cluster Oracle Blockchain Platform Netapp Snapcenter -Netapp Oncommand Workflow Automation -Netapp Oncommand Insight -Netapp Active Iq Unified Manager -

1 Github repository

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook