Vulnerabilities

TI-2023-23979 CVE-2023-44487 · GHSA-qppj-fm5r-hxr3

The HTTP/2 protocol allows a denial of service (server resource consumption) because…

CRITICAL 90KEV

The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.99999 Published 2023-10-10 Partial fix · 1.28.0, 0.17.0 +9 CWE-400

TI-2021-18910 CVE-2021-42697 · GHSA-3hw2-h67c-wq66

Akka HTTP 10.1.x before 10.1.15 and 10.2.x before 10.2.7 can encounter stack exhaustion…

MEDIUM 59

Akka HTTP 10.1.x before 10.1.15 and 10.2.x before 10.2.7 can encounter stack exhaustion while parsing HTTP headers, which allows a remote attacker to conduct a Denial of Service attack by sending a User-Agent header with…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.36139 Published 2021-11-02 Fixed in 10.1.15, 10.2.7 CWE-674

TI-2017-14455 CVE-2017-1000118 · GHSA-gfx6-ph4q-q54q

Akka HTTP versions <= 10.0.5 Illegal Media Range in Accept Header Causes StackOverflowError Leading to Denial of Service

LOW 35

Akka HTTP versions <= 10.0.5 Illegal Media Range in Accept Header Causes StackOverflowError Leading to Denial of Service

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01103 Published 2017-10-04 Fixed in 10.0.6 CWE-119

Vulnerabilities

Filters

The HTTP/2 protocol allows a denial of service (server resource consumption) because…

Akka HTTP 10.1.x before 10.1.15 and 10.2.x before 10.2.7 can encounter stack exhaustion…

Akka HTTP versions <= 10.0.5 Illegal Media Range in Accept Header Causes StackOverflowError Leading to Denial of Service