Lucene search
Ubuntu.comUB:CVE-2023-26964HistoryApr 11, 2023 - 12:00 a.m.
CVE-2023-26964
2023-04-1100:00:00
ubuntu.com
ubuntu.com
13
hyper h2.0.2.4 http2 dos unix denial of service
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS
0.001
Percentile
44.0%
An issue was discovered in hyper v0.13.7. h2-0.2.4 Stream stacking occurs
when the H2 component processes HTTP2 RST_STREAM frames. As a result, the
memory and CPU usage are high which can lead to a Denial of Service (DoS).
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 20.04 | noarch | rust-hyper | < any | UNKNOWN |
| ubuntu | 24.04 | noarch | rust-hyper | < any | UNKNOWN |
Related
osv
osv
wasm-pack-0.11.0~0-2.1 on GA media
2024-06-15 00:00:00
sccache-0.4.1~18-2.1 on GA media
2024-06-15 00:00:00
pijul-1.0.0~beta.5-1.1 on GA media
2024-06-15 00:00:00
cbl_mariner
cbl_mariner
github
github
h2 vulnerable to denial of service
2023-04-11 15:30:30
debiancve
debiancve
CVE-2023-26964
2023-04-11 14:15:07
fedora
fedora
[SECURITY] Fedora 38 Update: rust-bodhi-cli-2.1.0-2.fc38
2023-05-07 01:24:28
[SECURITY] Fedora 38 Update: rust-sevctl-0.3.2-4.fc38
2023-05-07 01:24:29
[SECURITY] Fedora 38 Update: rust-gst-plugin-reqwest-0.10.4-2.fc38
2023-05-07 01:24:29
nessus
nessus
openvas
openvas
Fedora: Security Advisory for rust-tealdeer (FEDORA-2023-cc21019773)
2023-05-08 00:00:00
Fedora: Security Advisory for clevis-pin-tpm2 (FEDORA-2023-37ae269843)
2023-05-19 00:00:00
Fedora: Security Advisory for rust-ybaas (FEDORA-2023-37ae269843)
2023-05-19 00:00:00
prion
prion
Design/Logic Flaw
2023-04-11 14:15:00
nvd
nvd
CVE-2023-26964
2023-04-11 14:15:07
cve
cve
CVE-2023-26964
2023-04-11 14:15:07
rustsec
rustsec
Resource exhaustion vulnerability in h2 may lead to Denial of Service (DoS)
2023-04-14 12:00:00
cvelist
cvelist
CVE-2023-26964
2023-04-11 00:00:00
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS
0.001
Percentile
44.0%
Related for UB:CVE-2023-26964