TI-2020-08954 CVE-2020-11080
Denial of service in nghttp2
Priority MEDIUM 41
In nghttp2 before version 1.41.0, the overly large HTTP/2 SETTINGS frame payload causes denial of service.
RHSA-2020:2823
nghttp2 security update
Released 2020-07-06 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat CodeReady Linux Builder EUS (v. 8.1) libnghttp2-devel-1.33.0-3.el8_1.1, nghttp2-1.33.0-3.el8_1.1
- Red Hat Enterprise Linux BaseOS EUS (v. 8.1) libnghttp2-1.33.0-3.el8_1.1, nghttp2-1.33.0-3.el8_1.1