Most recent entries from all

cnvd-2018-01620

2026-10-07T15:28:38.316861+00:00

cnvd-2018-01620

EUVD-2026-76378

2026-10-07T15:28:38.316902+00:00

EUVD-2026-76378

fkie_cve-2017-10908

2026-10-07T15:28:38.316917+00:00

H2O version 2.2.3 and earlier allows remote attackers to cause a denial of service in the server via specially crafted HTTP/2 header.

GHSA-hcqf-mq24-hm46

2026-10-07T15:28:38.316947+00:00

H2O version 2.2.3 and earlier allows remote attackers to cause a denial of service in the server via specially crafted HTTP/2 header.

gsd-2017-10908

2026-10-07T15:28:38.316963+00:00

gsd-2017-10908

jvndb-2017-000249

2026-10-07T15:28:38.316974+00:00

H2O is an open source web server software. H2O contains multiple vulnerabilities listed below. * A Denial-of-service (DoS) due to a flaw in processing HTTP/1 header (CWE-20) - CVE-2017-10868 * Stack-based buffer overflow (CWE-121) - CVE-2017-10869 * A Denial-of-service (DoS) due to a flaw in outputting of the access log (CWE-118) - CVE-2017-10872 * A Denial-of-service (DoS) due to a flaw in processing HTTP/2 header (CWE-20) - CVE-2017-10908 Kazuho Oku reported this vulnerability to IPA to notify users of its solution through JVN. JPCERT/CC and Kazuho Oku coordinated under the Information Security Early Warning Partnership.

Withdrawn: UBUNTU-CVE-2017-10908

2026-10-07T15:28:38.316995+00:00

Withdrawn by the publisher.

Affected: Ubuntu:18.04:LTS: h2o

H2O version 2.2.3 and earlier allows remote attackers to cause a denial of service in the server via specially crafted HTTP/2 header.