First published: Thu Apr 25 2024(Updated: )
It was discovered that nghttp2 incorrectly handled the HTTP/2 implementation. A remote attacker could possibly use this issue to cause nghttp2 to consume resources, leading to a denial of service. This issue only affected Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. (CVE-2019-9511, CVE-2019-9513) It was discovered that nghttp2 incorrectly handled request cancellation. A remote attacker could possibly use this issue to cause nghttp2 to consume resources, leading to a denial of service. This issue only affected Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. (CVE-2023-44487) It was discovered that nghttp2 could be made to process an unlimited number of HTTP/2 CONTINUATION frames. A remote attacker could possibly use this issue to cause nghttp2 to consume resources, leading to a denial of service. (CVE-2024-28182)
Affected Software | Affected Version | How to fix |
---|---|---|
All of | ||
ubuntu/libnghttp2-14 | <1.55.1-1ubuntu0.2 | 1.55.1-1ubuntu0.2 |
Ubuntu Ubuntu | =23.10 | |
All of | ||
ubuntu/nghttp2 | <1.55.1-1ubuntu0.2 | 1.55.1-1ubuntu0.2 |
Ubuntu Ubuntu | =23.10 | |
All of | ||
ubuntu/nghttp2-client | <1.55.1-1ubuntu0.2 | 1.55.1-1ubuntu0.2 |
Ubuntu Ubuntu | =23.10 | |
All of | ||
ubuntu/nghttp2-proxy | <1.55.1-1ubuntu0.2 | 1.55.1-1ubuntu0.2 |
Ubuntu Ubuntu | =23.10 | |
All of | ||
ubuntu/nghttp2-server | <1.55.1-1ubuntu0.2 | 1.55.1-1ubuntu0.2 |
Ubuntu Ubuntu | =23.10 | |
All of | ||
ubuntu/libnghttp2-14 | <1.43.0-1ubuntu0.2 | 1.43.0-1ubuntu0.2 |
Ubuntu Ubuntu | =22.04 | |
All of | ||
ubuntu/nghttp2 | <1.43.0-1ubuntu0.2 | 1.43.0-1ubuntu0.2 |
Ubuntu Ubuntu | =22.04 | |
All of | ||
ubuntu/nghttp2-client | <1.43.0-1ubuntu0.2 | 1.43.0-1ubuntu0.2 |
Ubuntu Ubuntu | =22.04 | |
All of | ||
ubuntu/nghttp2-proxy | <1.43.0-1ubuntu0.2 | 1.43.0-1ubuntu0.2 |
Ubuntu Ubuntu | =22.04 | |
All of | ||
ubuntu/nghttp2-server | <1.43.0-1ubuntu0.2 | 1.43.0-1ubuntu0.2 |
Ubuntu Ubuntu | =22.04 | |
All of | ||
ubuntu/libnghttp2-14 | <1.40.0-1ubuntu0.3 | 1.40.0-1ubuntu0.3 |
Ubuntu Ubuntu | =20.04 | |
All of | ||
ubuntu/nghttp2 | <1.40.0-1ubuntu0.3 | 1.40.0-1ubuntu0.3 |
Ubuntu Ubuntu | =20.04 | |
All of | ||
ubuntu/nghttp2-client | <1.40.0-1ubuntu0.3 | 1.40.0-1ubuntu0.3 |
Ubuntu Ubuntu | =20.04 | |
All of | ||
ubuntu/nghttp2-proxy | <1.40.0-1ubuntu0.3 | 1.40.0-1ubuntu0.3 |
Ubuntu Ubuntu | =20.04 | |
All of | ||
ubuntu/nghttp2-server | <1.40.0-1ubuntu0.3 | 1.40.0-1ubuntu0.3 |
Ubuntu Ubuntu | =20.04 | |
All of | ||
ubuntu/libnghttp2-14 | <1.30.0-1ubuntu1+esm2 | 1.30.0-1ubuntu1+esm2 |
Ubuntu Ubuntu | =18.04 | |
All of | ||
ubuntu/nghttp2 | <1.30.0-1ubuntu1+esm2 | 1.30.0-1ubuntu1+esm2 |
Ubuntu Ubuntu | =18.04 | |
All of | ||
ubuntu/nghttp2-client | <1.30.0-1ubuntu1+esm2 | 1.30.0-1ubuntu1+esm2 |
Ubuntu Ubuntu | =18.04 | |
All of | ||
ubuntu/nghttp2-proxy | <1.30.0-1ubuntu1+esm2 | 1.30.0-1ubuntu1+esm2 |
Ubuntu Ubuntu | =18.04 | |
All of | ||
ubuntu/nghttp2-server | <1.30.0-1ubuntu1+esm2 | 1.30.0-1ubuntu1+esm2 |
Ubuntu Ubuntu | =18.04 | |
All of | ||
ubuntu/libnghttp2-14 | <1.7.1-1ubuntu0.1~esm2 | 1.7.1-1ubuntu0.1~esm2 |
Ubuntu Ubuntu | =16.04 | |
All of | ||
ubuntu/nghttp2 | <1.7.1-1ubuntu0.1~esm2 | 1.7.1-1ubuntu0.1~esm2 |
Ubuntu Ubuntu | =16.04 | |
All of | ||
ubuntu/nghttp2-client | <1.7.1-1ubuntu0.1~esm2 | 1.7.1-1ubuntu0.1~esm2 |
Ubuntu Ubuntu | =16.04 | |
All of | ||
ubuntu/nghttp2-proxy | <1.7.1-1ubuntu0.1~esm2 | 1.7.1-1ubuntu0.1~esm2 |
Ubuntu Ubuntu | =16.04 | |
All of | ||
ubuntu/nghttp2-server | <1.7.1-1ubuntu0.1~esm2 | 1.7.1-1ubuntu0.1~esm2 |
Ubuntu Ubuntu | =16.04 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
(Contains the following vulnerabilities)