Skip to content
OpenAdvisories

Package · Ubuntu

h2o

20 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Low 3.7
    CVE-2024-45403

    H2O assertion failure when HTTP/3 requests are cancelled

    h2o is an HTTP server with support for HTTP/1.x, HTTP/2 and HTTP/3. When h2o is configured as a reverse proxy and HTTP/3 requests are cancelled by the client, h2o might crash due to an assertion failure. The crash can be exploited by an attacker to mount a De…

    h2o h2o h2o Ubuntu
  • Low 3.1
    CVE-2024-25622

    H2O ignores headers configuration directives

    h2o is an HTTP server with support for HTTP/1.x, HTTP/2 and HTTP/3. The configuration directives provided by the headers handler allows users to modify the response headers being sent by h2o. The configuration file of h2o has scopes, and the inner scopes (e.g…

    h2o h2o h2o h2o Debian Ubuntu