TI-2020-08954 CVE-2020-11080
Denial of service in nghttp2
Priority MEDIUM 41
In nghttp2 before version 1.41.0, the overly large HTTP/2 SETTINGS frame payload causes denial of service.
RHSA-2020:2784
httpd24-nghttp2 security update
Released 2020-07-01 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6) httpd24-libnghttp2-1.7.1-8.el6.1, httpd24-libnghttp2-devel-1.7.1-8.el6.1, httpd24-nghttp2-1.7.1-8.el6.1
- Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7) httpd24-libnghttp2-1.7.1-8.el7.1, httpd24-libnghttp2-devel-1.7.1-8.el7.1, httpd24-nghttp2-1.7.1-8.el7.1
- Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6) httpd24-libnghttp2-1.7.1-8.el7.1, httpd24-libnghttp2-devel-1.7.1-8.el7.1, httpd24-nghttp2-1.7.1-8.el7.1
- Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7) httpd24-libnghttp2-1.7.1-8.el7.1, httpd24-libnghttp2-devel-1.7.1-8.el7.1, httpd24-nghttp2-1.7.1-8.el7.1
- Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6) httpd24-libnghttp2-1.7.1-8.el6.1, httpd24-libnghttp2-devel-1.7.1-8.el6.1, httpd24-nghttp2-1.7.1-8.el6.1
- Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7) httpd24-libnghttp2-1.7.1-8.el7.1, httpd24-libnghttp2-devel-1.7.1-8.el7.1, httpd24-nghttp2-1.7.1-8.el7.1