ELSA-2023-6746

Опубликовано: 16 нояб. 2023

Источник: oracle-oval

Платформа: Oracle Linux 9

Описание

ELSA-2023-6746: nghttp2 security update (IMPORTANT)

[1.43.0-5.1]

fix HTTP/2 Rapid Reset (CVE-2023-44487)

Обновленные пакеты

Oracle Linux 9

Oracle Linux aarch64

libnghttp2

1.43.0-5.el9_3.1

libnghttp2-devel

1.43.0-5.el9_3.1

nghttp2

1.43.0-5.el9_3.1

Oracle Linux x86_64

libnghttp2

1.43.0-5.el9_3.1

libnghttp2-devel

1.43.0-5.el9_3.1

nghttp2

1.43.0-5.el9_3.1

Связанные CVE

CVE-2023-44487

Ссылки на источники

Связанные уязвимости

CVE-2023-44487

CVSS3: 7.5

ubuntu

больше 1 года назад

The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.

CVE-2023-44487

CVSS3: 7.5

redhat

больше 1 года назад

The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.

CVE-2023-44487

CVSS3: 7.5

nvd

больше 1 года назад

The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.

CVE-2023-44487

msrc

больше 1 года назад

MITRE: CVE-2023-44487 HTTP/2 Rapid Reset Attack

CVE-2023-44487

CVSS3: 7.5

debian

больше 1 года назад

The HTTP/2 protocol allows a denial of service (server resource consum ...