Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 495
Alerts This Week
Warning Icon 1 495

Fedora 24: FEDORA-2016-bb123c456d High: nghttp3 Buffer Overflow

fedora
Calendar Grey February 17, 2016
Dist Fedora Esm H88
Critical memory overflow issue identified in nghttpd, nghttp, and libnghttp2_asio applications prompts immediate patching for Fedora 23.
CVE-2016-1544: Out of memory in nghttpd, nghttp, and libnghttp2_asio applications due to unlimited incoming HTTP header fields: https://github.com/nghttp2/nghttp2/releases/tag/v1.7...

Summary

This package contains the HTTP/2 client, server and proxy programs.

Update Information:

CVE-2016-1544: Out of memory in nghttpd, nghttp, and libnghttp2_asio applications due to unlimited incoming HTTP header fields: https://github.com/nghttp2/nghttp2/releases/tag/v1.7.1

Topics%20covered

Topics Covered

security advisory moderate Fedora memory leak application fix nghttp2

Change Log

References


[ 1 ] Bug #1308461 - CVE-2016-1544 nghttp2: out of memory error due to unlimited incoming HTTP header fields https://bugzilla.redhat.com/show_bug.cgi?id=1308461

Update Instructions

This update can be installed with the "yum" update program. Use su -c 'yum update nghttp2' at the command line. For more information, refer to "Managing Software with yum", available at .

Severity
important
Lowest
Low
Medium
High
Critical

Name: nghttp2
Product: Fedora 23
Version: 1.7.1
Release: 1.fc23
URL: https://nghttp2.org/
Summary: Experimental HTTP/2 client, server and proxy

Topics%20covered

Topics Covered

security advisory moderate Fedora memory leak application fix nghttp2

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.