Skip to content
OpenAdvisories
Unscored CVE-2017-10869 EUVD-2017-2509GHSA-874p-r2p7-p9cg

Buffer overflow in H2O version 2.2.2 and earlier allows remote attackers to cause a denial-of-service in the server via unspecified vectors.

Published Dec 22, 2017 · Updated Aug 5, 2024 · Assigned by jpcert

Vendor: Kazuho Oku Product: H2O Package: h2o Ecosystem: Debian

Description

Buffer overflow in H2O version 2.2.2 and earlier allows remote attackers to cause a denial-of-service in the server via unspecified vectors.

Affected products

VendorProductAffectedFixed
Kazuho Oku H2O version 2.2.2 and earlier —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗
ReleasePackageFixed inAdvisory
Debian 12 h2o 2.2.3+dfsg-1 —

References