Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2023-26964HistoryApr 11, 2023 - 2:15 p.m.
CVE-2023-26964
2023-04-1114:15:07
Debian Security Bug Tracker
security-tracker.debian.org
17
hyper v0.13.7
http2 rst_stream
denial of service
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS
0.001
Percentile
44.0%
An issue was discovered in hyper v0.13.7. h2-0.2.4 Stream stacking occurs when the H2 component processes HTTP2 RST_STREAM frames. As a result, the memory and CPU usage are high which can lead to a Denial of Service (DoS).
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | rust-h2 | < 0.3.13-2 | rust-h2_0.3.13-2_all.deb |
| Debian | 999 | all | rust-h2 | < 0.3.13-2 | rust-h2_0.3.13-2_all.deb |
| Debian | 13 | all | rust-h2 | < 0.3.13-2 | rust-h2_0.3.13-2_all.deb |
Related
cbl_mariner
cbl_mariner
osv
osv
h2 vulnerable to denial of service
2023-04-11 15:30:30
wasm-pack-0.11.0~0-2.1 on GA media
2024-06-15 00:00:00
sccache-0.4.1~18-2.1 on GA media
2024-06-15 00:00:00
github
github
h2 vulnerable to denial of service
2023-04-11 15:30:30
fedora
fedora
[SECURITY] Fedora 38 Update: rust-bodhi-cli-2.1.0-2.fc38
2023-05-07 01:24:28
[SECURITY] Fedora 38 Update: rust-sevctl-0.3.2-4.fc38
2023-05-07 01:24:29
[SECURITY] Fedora 38 Update: rust-gst-plugin-reqwest-0.10.4-2.fc38
2023-05-07 01:24:29
nessus
nessus
openvas
openvas
Fedora: Security Advisory for rust-tealdeer (FEDORA-2023-cc21019773)
2023-05-08 00:00:00
Fedora: Security Advisory for clevis-pin-tpm2 (FEDORA-2023-37ae269843)
2023-05-19 00:00:00
Fedora: Security Advisory for rust-ybaas (FEDORA-2023-37ae269843)
2023-05-19 00:00:00
prion
prion
Design/Logic Flaw
2023-04-11 14:15:00
ubuntucve
ubuntucve
CVE-2023-26964
2023-04-11 00:00:00
cve
cve
CVE-2023-26964
2023-04-11 14:15:07
rustsec
rustsec
Resource exhaustion vulnerability in h2 may lead to Denial of Service (DoS)
2023-04-14 12:00:00
cvelist
cvelist
CVE-2023-26964
2023-04-11 00:00:00
nvd
nvd
CVE-2023-26964
2023-04-11 14:15:07
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS
0.001
Percentile
44.0%
Related for DEBIANCVE:CVE-2023-26964