Skip to content
OpenAdvisories
Medium WID-SEC-2024-0789 8 CVEs

HTTP/2: Mehrere Schwachstellen ermöglichen Denial of Service

Published Apr 3, 2024 · Updated Oct 15, 2026 · Revision 115 · de-DE

Vendor: amazon Vendor: Apache Vendor: Arista Networks Vendor: Broadcom Vendor: Debian Vendor: Dell Vendor: EMC Vendor: Fedora Vendor: gentoo Vendor: golang Vendor: HPE Vendor: IBM Vendor: Oracle Vendor: Red Hat Vendor: RESF Vendor: Specification Vendor: Splunk Vendor: SUSE Vendor: Ubuntu Vendor: Xerox Product: App Connect Enterprise Product: Avamar Product: Brocade SANnav Product: DataPower Gateway Product: Enterprise Product: Enterprise Linux Product: EOS Product: FlashSystem Product: FreeFlow Print Server Product: Go +25 more

Summary

Ein entfernter, anonymer Angreifer kann eine Schwachstellen in verschiedenen http/2 Implementierungen ausnutzen, um einen Denial of Service Angriff durchzuführen.

Product

http/2 ist das HyperText Transfer Protocol in Version 2.

Vulnerabilities 8

  • High 8.2
    CVE-2024-2653 EPSS 80%

    CVE-2024-2653

    amphp/http will collect CONTINUATION frames in an unbounded buffer and will not check a limit until it has received the set END_HEADERS flag, resulting in an OOM crash.

    AMPHP amphp/http amphp/http-client amphp/http-client Packagist
  • High 7.5
    CVE-2023-45288 Public exploit EPSS 89%

    HTTP/2 CONTINUATION flood in net/http

    An attacker may cause an HTTP/2 endpoint to read arbitrary amounts of header data by sending an excessive number of CONTINUATION frames. Maintaining HPACK state requires parsing and processing all HEADERS and CONTINUATION frames on a connection. When a reques…

    Go standard library golang.org/x/net net/http golang.org/x/net/http2 Debian Ubuntu Azure Linux Alpine Wolfi Go
  • High 7.5
    CVE-2024-27316 Public exploit EPSS 89%

    Apache HTTP Server: HTTP/2 DoS by memory exhaustion on endless continuation frames

    HTTP/2 incoming headers exceeding the limit are temporarily buffered in nghttp2 in order to generate an informative HTTP 413 response. If a client does not stop sending headers, this leads to memory exhaustion.

    Apache Software Foundation Apache HTTP Server apache2 apache2 Debian Ubuntu Azure Linux Alpine
  • High 7.5
    CVE-2024-27919 EPSS 84%

    HTTP/2: memory exhaustion due to CONTINUATION frame flood

    Envoy is a cloud-native, open-source edge and service proxy. In versions 1.29.0 and 1.29.1, theEnvoy HTTP/2 protocol stack is vulnerable to the flood of CONTINUATION frames. Envoy's HTTP/2 codec does not reset a request when header map limits have been exceed…

    envoyproxy envoy
  • High 7.5
    CVE-2024-31309 EPSS 92%

    Apache Traffic Server: HTTP/2 CONTINUATION frames can be utilized for DoS attack

    HTTP/2 CONTINUATION DoS attack can cause Apache Traffic Server to consume more resources on the server.  Version from 8.0.0 through 8.1.9, from 9.0.0 through 9.2.3 are affected. Users can set a new setting (proxy.config.http2.max_continuation_frames_per_minut…

    Apache Software Foundation Apache Traffic Server trafficserver trafficserver Debian Ubuntu Alpine
  • Medium 6.3
    CVE-2024-2758 EPSS 68%

    CVE-2024-2758

    Tempesta FW rate limits are not enabled by default. They are either set too large to capture empty CONTINUATION frames attacks or too small to handle normal HTTP requests appropriately.

    Tempesta Tempesta FW
  • Medium 5.3
    CVE-2024-28182 EPSS 82%

    Reading unbounded number of HTTP/2 CONTINUATION frames to cause excessive CPU usage

    nghttp2 is an implementation of the Hypertext Transfer Protocol version 2 in C. The nghttp2 library prior to version 1.61.0 keeps reading the unbounded number of HTTP/2 CONTINUATION frames even after a stream is reset to keep HPACK context in sync. This cause…

    nghttp2 nghttp2 rust nodejs Debian Ubuntu Azure Linux Wolfi
  • Medium 5.3
    CVE-2024-30255 Public exploit EPSS 85%

    HTTP/2: CPU exhaustion due to CONTINUATION frame flood

    Envoy is a cloud-native, open source edge and service proxy. The HTTP/2 protocol stack in Envoy versions prior to 1.29.3, 1.28.2, 1.27.4, and 1.26.8 are vulnerable to CPU exhaustion due to flood of CONTINUATION frames. Envoy's HTTP/2 codec allows the client t…

    envoyproxy envoy

Revision history

  1. #115

    Neue Updates von Red Hat aufgenommen

  2. #114

    Neue Updates von openSUSE aufgenommen

  3. #113

    Neue Updates von Dell aufgenommen

  4. #112

    Neue Updates von Oracle Linux aufgenommen

  5. #111

    Neue Updates von openSUSE aufgenommen

  6. #110

    Neue Updates von SUSE aufgenommen

  7. #109

    Neue Updates von openSUSE aufgenommen

  8. #108

    Neue Updates von openSUSE aufgenommen

  9. #107

    Neue Updates von Red Hat aufgenommen

  10. #106

    Neue Updates von SUSE aufgenommen

  11. #105

    Neue Updates von SUSE aufgenommen

  12. #104

    Neue Updates von Red Hat aufgenommen

  13. #103

    Neue Updates von openSUSE aufgenommen

  14. #102

    Neue Updates von Red Hat aufgenommen

  15. #101

    Neue Updates von openSUSE aufgenommen

  16. #100

    Neue Updates von SUSE aufgenommen

  17. #99

    Neue Updates von IBM aufgenommen

  18. #98

    Neue Updates von SUSE aufgenommen

  19. #97

    Neue Updates von SUSE aufgenommen

  20. #96

    Neue Updates von BROCADE aufgenommen

  21. #95

    Neue Updates von SUSE aufgenommen

  22. #94

    Neue Updates von SUSE und openSUSE aufgenommen

  23. #93

    Neue Updates von SUSE aufgenommen

  24. #92

    Neue Updates von HP aufgenommen

  25. #91

    Neue Updates von XEROX aufgenommen

References