TI-2020-08954 CVE-2020-11080
Denial of service in nghttp2
Priority MEDIUM 41
In nghttp2 before version 1.41.0, the overly large HTTP/2 SETTINGS frame payload causes denial of service.
RHSA-2020:2755
nghttp2 security update
Released 2020-06-25 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat CodeReady Linux Builder (v. 8) libnghttp2-devel-1.33.0-3.el8_2.1, nghttp2-1.33.0-3.el8_2.1
- Red Hat Enterprise Linux BaseOS (v. 8) libnghttp2-1.33.0-3.el8_2.1, nghttp2-1.33.0-3.el8_2.1