← All advisories

High severity7.5NVD Advisory· Published Dec 22, 2017· Updated Jun 17, 2026

CVE-2017-10908

CVE-2017-10908

Description

H2O version 2.2.3 and earlier allows remote attackers to cause a denial of service in the server via specially crafted HTTP/2 header.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2

H2o Project/H2o2 versions
cpe:2.3:a:dena:h2o:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:dena:h2o:*:*:*:*:*:*:*:*range: <=2.2.3
- (no CPE)range: version 2.2.3 and earlier

Patches

Vulnerability mechanics

References

2

github.com/h2o/h2o/issues/1544nvdThird Party Advisory
jvn.jp/en/jp/JVN84182676/index.htmlnvdThird Party AdvisoryVDB Entry

News mentions

0

No linked articles in our index yet.