All errata/sisyphus/ALT-PU-2015-2170-1
ALT-PU-2015-2170-1

Package update libnghttp2 in branch sisyphus

Version1.6.0-alt1
Task#155273
Published2015-12-23
Max severityCRITICAL
Severity:

Closed issues (2)

BDU:2016-00507
CRITICAL10.0

Уязвимость библиотеки nghttp2, позволяющая нарушителю вызвать отказ в обслуживании или выполнить произвольный код

Published: 2016-03-02Modified: 2021-03-23
CVSS 2.0CRITICAL 10.0
CVSS:2.0/AV:N/AC:L/Au:N/C:C/I:C/A:C
References
CVE-2015-8659
CRITICAL10.0

The idle stream handling in nghttp2 before 1.6.0 allows attackers to have unspecified impact via unknown vectors, aka a heap-use-after-free bug.

Published: 2016-01-12Modified: 2025-04-12
CVSS 2.0CRITICAL 10.0
CVSS:2.0/AV:N/AC:L/Au:N/C:C/I:C/A:C
CVSS 3.xCRITICAL 10.0
CVSS:3.x/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
References