VYPR

rpm package

suse/nghttp2&distro=SUSE Linux Enterprise Module for Basesystem 15

pkg:rpm/suse/nghttp2&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015

Vulnerabilities (2)

  • CVE-2019-9513Aug 13, 2019
    affected < 1.39.2-3.3.1fixed 1.39.2-3.3.1

    Some HTTP/2 implementations are vulnerable to resource loops, potentially leading to a denial of service. The attacker creates multiple request streams and continually shuffles the priority of the streams in a way that causes substantial churn to the priority tree. This can consu

  • CVE-2019-9511Aug 13, 2019
    affected < 1.39.2-3.3.1fixed 1.39.2-3.3.1

    Some HTTP/2 implementations are vulnerable to window size manipulation and stream prioritization manipulation, potentially leading to a denial of service. The attacker requests a large amount of data from a specified resource over multiple streams. They manipulate window size and