Description
Use-after-free vulnerability in H2O allows remote attackers to cause a denial-of-service (DoS) or obtain server certificate private keys and possibly other information.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Kazuho Oku | H2O | version 2.0.4 and earlier | — |
References
- 95061 vdb-entry
- https://github.com/h2o/h2o/issues/1144
- JVN#44566208 third-party-advisory