vulnerability

CentOS Linux: CVE-2019-9513: Important: nghttp2 security update (Multiple Advisories)

Try Surface Command

Back to search

Severity	CVSS	Published	Added	Modified
8	(AV:N/AC:L/Au:N/C:N/I:N/A:C)	Aug 13, 2019	Sep 11, 2019	May 25, 2023

Severity

CVSS

(AV:N/AC:L/Au:N/C:N/I:N/A:C)

Published

Aug 13, 2019

Added

Sep 11, 2019

Modified

May 25, 2023

Description

Some HTTP/2 implementations are vulnerable to resource loops, potentially leading to a denial of service. The attacker creates multiple request streams and continually shuffles the priority of the streams in a way that causes substantial churn to the priority tree. This can consume excess CPU.

Solution(s)

centos-upgrade-libnghttp2centos-upgrade-libnghttp2-debuginfocentos-upgrade-nghttp2-debuginfocentos-upgrade-nghttp2-debugsourcecentos-upgrade-nginxcentos-upgrade-nginx-all-modulescentos-upgrade-nginx-debuginfocentos-upgrade-nginx-debugsourcecentos-upgrade-nginx-filesystemcentos-upgrade-nginx-mod-http-image-filtercentos-upgrade-nginx-mod-http-image-filter-debuginfocentos-upgrade-nginx-mod-http-perlcentos-upgrade-nginx-mod-http-perl-debuginfocentos-upgrade-nginx-mod-http-xslt-filtercentos-upgrade-nginx-mod-http-xslt-filter-debuginfocentos-upgrade-nginx-mod-mailcentos-upgrade-nginx-mod-mail-debuginfocentos-upgrade-nginx-mod-streamcentos-upgrade-nginx-mod-stream-debuginfocentos-upgrade-nodejscentos-upgrade-nodejs-debuginfocentos-upgrade-nodejs-debugsourcecentos-upgrade-nodejs-develcentos-upgrade-nodejs-devel-debuginfocentos-upgrade-nodejs-docscentos-upgrade-nodejs-nodemoncentos-upgrade-nodejs-packagingcentos-upgrade-npm

References

NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.

Try it today