Skip to content
OpenAdvisories

Package · Azure Linux

nghttp2

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.3
    CVE-2022-4996

    mruby bigint.c udiv floating point comparison with incorrect operator

    A flaw has been found in mruby 3.1.0. Affected is the function udiv of the file bigint.c. Executing a manipulation can lead to floating point comparison with incorrect operator. It is possible to launch the attack remotely. The exploit has been published and …

    mruby nghttp2 Ubuntu Azure Linux
  • Medium 5.3
    CVE-2024-28182 EPSS 82%

    Reading unbounded number of HTTP/2 CONTINUATION frames to cause excessive CPU usage

    nghttp2 is an implementation of the Hypertext Transfer Protocol version 2 in C. The nghttp2 library prior to version 1.61.0 keeps reading the unbounded number of HTTP/2 CONTINUATION frames even after a stream is reset to keep HPACK context in sync. This cause…

    nghttp2 nghttp2 rust nodejs Debian Ubuntu Azure Linux Wolfi