Описание
ELSA-2023-5713: nginx:1.22 security update (MODERATE)
[1:1.22.1-1.0.1.1]
- Resolves: RHEL-12728 - nginx:1.22/nginx: HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack)(CVE-2023-44487)
Обновленные пакеты
Oracle Linux 8
Oracle Linux aarch64
Module nginx:1.22 is enabled
nginx
1.22.1-1.0.1.module+el8.8.0+21180+f87487ef.1
nginx-all-modules
1.22.1-1.0.1.module+el8.8.0+21180+f87487ef.1
nginx-filesystem
1.22.1-1.0.1.module+el8.8.0+21180+f87487ef.1
nginx-mod-devel
1.22.1-1.0.1.module+el8.8.0+21180+f87487ef.1
nginx-mod-http-image-filter
1.22.1-1.0.1.module+el8.8.0+21180+f87487ef.1
nginx-mod-http-perl
1.22.1-1.0.1.module+el8.8.0+21180+f87487ef.1
nginx-mod-http-xslt-filter
1.22.1-1.0.1.module+el8.8.0+21180+f87487ef.1
nginx-mod-mail
1.22.1-1.0.1.module+el8.8.0+21180+f87487ef.1
nginx-mod-stream
1.22.1-1.0.1.module+el8.8.0+21180+f87487ef.1
Oracle Linux x86_64
Module nginx:1.22 is enabled
nginx
1.22.1-1.0.1.module+el8.8.0+21180+f87487ef.1
nginx-all-modules
1.22.1-1.0.1.module+el8.8.0+21180+f87487ef.1
nginx-filesystem
1.22.1-1.0.1.module+el8.8.0+21180+f87487ef.1
nginx-mod-devel
1.22.1-1.0.1.module+el8.8.0+21180+f87487ef.1
nginx-mod-http-image-filter
1.22.1-1.0.1.module+el8.8.0+21180+f87487ef.1
nginx-mod-http-perl
1.22.1-1.0.1.module+el8.8.0+21180+f87487ef.1
nginx-mod-http-xslt-filter
1.22.1-1.0.1.module+el8.8.0+21180+f87487ef.1
nginx-mod-mail
1.22.1-1.0.1.module+el8.8.0+21180+f87487ef.1
nginx-mod-stream
1.22.1-1.0.1.module+el8.8.0+21180+f87487ef.1
Связанные CVE
Связанные уязвимости
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
The HTTP/2 protocol allows a denial of service (server resource consum ...