VYPR

rpm package

opensuse/nghttp2&distro=openSUSE Leap 15.0

pkg:rpm/opensuse/nghttp2&distro=openSUSE%20Leap%2015.0

Vulnerabilities (2)

  • CVE-2019-9513Aug 13, 2019
    affected < 1.39.2-lp150.2.3.1fixed 1.39.2-lp150.2.3.1

    Some HTTP/2 implementations are vulnerable to resource loops, potentially leading to a denial of service. The attacker creates multiple request streams and continually shuffles the priority of the streams in a way that causes substantial churn to the priority tree. This can consu

  • CVE-2019-9511Aug 13, 2019
    affected < 1.39.2-lp150.2.3.1fixed 1.39.2-lp150.2.3.1

    Some HTTP/2 implementations are vulnerable to window size manipulation and stream prioritization manipulation, potentially leading to a denial of service. The attacker requests a large amount of data from a specified resource over multiple streams. They manipulate window size and