CVE-2016-1544

Опубликовано: 06 фев. 2020

Источник: nvd

CVSS3: 3.3

CVSS2: 2.1

EPSS Низкий

Описание

nghttp2 before 1.7.1 allows remote attackers to cause a denial of service (memory exhaustion).

Ссылки

http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177308.html
Mailing List
Patch
Third Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177666.html
Mailing List
Patch
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1308461
Issue Tracking
Patch
Third Party Advisory
https://github.com/nghttp2/nghttp2/compare/v1.7.0...v1.7.1
Release Notes
Third Party Advisory
https://github.com/nghttp2/nghttp2/releases/tag/v1.7.1
Release Notes
Third Party Advisory
https://security.gentoo.org/glsa/201612-13
Third Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177308.html
Mailing List
Patch
Third Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177666.html
Mailing List
Patch
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1308461
Issue Tracking
Patch
Third Party Advisory
https://github.com/nghttp2/nghttp2/compare/v1.7.0...v1.7.1
Release Notes
Third Party Advisory
https://github.com/nghttp2/nghttp2/releases/tag/v1.7.1
Release Notes
Third Party Advisory
https://security.gentoo.org/glsa/201612-13
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:nghttp2:nghttp2:*:*:*:*:*:*:*:*

Версия до 1.7.1 (исключая)

Конфигурация 2

Одно из

cpe:2.3:o:fedoraproject:fedora:22:*:*:*:*:*:*:*

cpe:2.3:o:fedoraproject:fedora:23:*:*:*:*:*:*:*

EPSS

Процентиль: 56%

0.00886

Низкий

3.3 Low

CVSS3

2.1 Low

CVSS2

Дефекты

CWE-400

Связанные уязвимости

CVE-2016-1544

CVSS3: 3.3

ubuntu

больше 6 лет назад

nghttp2 before 1.7.1 allows remote attackers to cause a denial of service (memory exhaustion).

CVE-2016-1544

redhat

больше 10 лет назад

nghttp2 before 1.7.1 allows remote attackers to cause a denial of service (memory exhaustion).

CVE-2016-1544

CVSS3: 3.3

debian

больше 6 лет назад

nghttp2 before 1.7.1 allows remote attackers to cause a denial of serv ...

openSUSE-SU-2016:0675-1

suse-cvrf

больше 10 лет назад

Security update for nghttp2

GHSA-32wx-5655-89rw

github

около 4 лет назад

nghttp2 before 1.7.1 allows remote attackers to cause a denial of service (memory exhaustion).

EPSS

Процентиль: 56%

0.00886

Низкий

3.3 Low

CVSS3

2.1 Low

CVSS2

Дефекты

CWE-400