Red Hat Security AdvisoryRHSA-2019:2775
rh-nginx114-nginx security update
Released 2019-09-17 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7) rh-nginx114-nginx-1:1.14.1-1.el7.1, rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1, rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1 +3
- Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4) rh-nginx114-nginx-1:1.14.1-1.el7.1, rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1, rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1 +3
- Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5) rh-nginx114-nginx-1:1.14.1-1.el7.1, rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1, rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1 +3
- Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6) rh-nginx114-nginx-1:1.14.1-1.el7.1, rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1, rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1 +3
- Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7) rh-nginx114-nginx-1:1.14.1-1.el7.1, rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1, rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1 +3
- Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7) rh-nginx114-nginx-1:1.14.1-1.el7.1, rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1, rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1 +3
Fixes 3 records
Priority HIGH 73
Some HTTP/2 implementations are vulnerable to resource loops, potentially leading to a denial of service.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.81556 · Published 2019-08-13 · Partial fix CWE-400
Priority HIGH 67
Some HTTP/2 implementations are vulnerable to window size manipulation and stream prioritization manipulation, potentially leading to a denial of service.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.59547 · Published 2019-08-13 · Partial fix CWE-400
Priority MEDIUM 62
Some HTTP/2 implementations are vulnerable to a header leak, potentially leading to a denial of service.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.57461 · Published 2019-08-13 · Partial fix CWE-400
