Archive
1 February 2022
Vulnerabilities first published on this day (UTC), newest first.
1 result · Clear filters · Feed
-
High 7.4CVE-2021-43848 Public exploit
Unititialized memory access in h2o
h2o is an open source http server. In code prior to the `8c0eca3` commit h2o may attempt to access uninitialized memory. When receiving QUIC frames in certain order, HTTP/3 server-side implementation of h2o can be misguided to treat uninitialized memory as HT…