https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 04:54:53 +0000 https://cve.radiocsirt.org/vuln/alsa-2019:2799 <p><strong>Affected:</strong> AlmaLinux:8: nginx, AlmaLinux:8: nginx-all-modules, AlmaLinux:8: nginx-filesystem, AlmaLinux:8: nginx-mod-http-image-filter, AlmaLinux:8: nginx-mod-http-perl, AlmaLinux:8: nginx-mod-http-xslt-filter, AlmaLinux:8: nginx-mod-mail, AlmaLinux:8: nginx-mod-stream</p> <p>Nginx is a web server and a reverse proxy server for HTTP, SMTP, POP3 (Post Office Protocol 3) and IMAP protocols, with a focus on high concurrency, performance and low memory usage.</p> <p>Security Fix(es):</p> <p>* HTTP/2: large amount of data request leads to denial of service (CVE-2019-9511)</p> <p>* HTTP/2: flood using PRIORITY frames resulting in excessive resource consumption (CVE-2019-9513)</p> <p>* HTTP/2: 0-length headers leads to denial of service (CVE-2019-9516)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p><strong>Affected:</strong> AlmaLinux:8: nginx, AlmaLinux:8: nginx-all-modules, AlmaLinux:8: nginx-filesystem, AlmaLinux:8: nginx-mod-http-image-filter, AlmaLinux:8: nginx-mod-http-perl, AlmaLinux:8: nginx-mod-http-xslt-filter, AlmaLinux:8: nginx-mod-mail, AlmaLinux:8: nginx-mod-stream</p> <p>Nginx is a web server and a reverse proxy server for HTTP, SMTP, POP3 (Post Office Protocol 3) and IMAP protocols, with a focus on high concurrency, performance and low memory usage.</p> <p>Security Fix(es):</p> <p>* HTTP/2: large amount of data request leads to denial of service (CVE-2019-9511)</p> <p>* HTTP/2: flood using PRIORITY frames resulting in excessive resource consumption (CVE-2019-9513)</p> <p>* HTTP/2: 0-length headers leads to denial of service (CVE-2019-9516)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2019:2799 https://cve.radiocsirt.org/vuln/bdu:2019-03638 bdu:2019-03638 https://cve.radiocsirt.org/vuln/bdu:2019-03638 https://cve.radiocsirt.org/vuln/bell-cve-2019-9516 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Withdrawn by the publisher.</strong></p> https://cve.radiocsirt.org/vuln/bell-cve-2019-9516 https://cve.radiocsirt.org/vuln/certfr-2019-avi-388 certfr-2019-avi-388 https://cve.radiocsirt.org/vuln/certfr-2019-avi-388 https://cve.radiocsirt.org/vuln/cleanstart-2026-af45008 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> CleanStart: nginx</p> <p>Multiple security vulnerabilities affect the nginx package. When multiple server blocks are configured to share the same IP address and port, an attacker can use session resumption to bypass client certificate authentication requirements on these servers. See references for individual vulnerability details.</p> <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> CleanStart: nginx</p> <p>Multiple security vulnerabilities affect the nginx package. When multiple server blocks are configured to share the same IP address and port, an attacker can use session resumption to bypass client certificate authentication requirements on these servers. See references for individual vulnerability details.</p> https://cve.radiocsirt.org/vuln/cleanstart-2026-af45008 https://cve.radiocsirt.org/vuln/euvd-2026-52938 EUVD-2026-52938 https://cve.radiocsirt.org/vuln/euvd-2026-52938 https://cve.radiocsirt.org/vuln/fkie_cve-2019-9516 <p>Some HTTP/2 implementations are vulnerable to a header leak, potentially leading to a denial of service. The attacker sends a stream of headers with a 0-length header name and 0-length header value, optionally Huffman encoded into 1-byte or greater headers. Some implementations allocate memory for these headers and keep the allocation alive until the session dies. This can consume excess memory.</p> <p>Some HTTP/2 implementations are vulnerable to a header leak, potentially leading to a denial of service. The attacker sends a stream of headers with a 0-length header name and 0-length header value, optionally Huffman encoded into 1-byte or greater headers. Some implementations allocate memory for these headers and keep the allocation alive until the session dies. This can consume excess memory.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2019-9516 https://cve.radiocsirt.org/vuln/ghsa-6gw7-c226-vg73 <p>Some HTTP/2 implementations are vulnerable to a header leak, potentially leading to a denial of service. The attacker sends a stream of headers with a 0-length header name and 0-length header value, optionally Huffman encoded into 1-byte or greater headers. Some implementations allocate memory for these headers and keep the allocation alive until the session dies. This can consume excess memory.</p> <p>Some HTTP/2 implementations are vulnerable to a header leak, potentially leading to a denial of service. The attacker sends a stream of headers with a 0-length header name and 0-length header value, optionally Huffman encoded into 1-byte or greater headers. Some implementations allocate memory for these headers and keep the allocation alive until the session dies. This can consume excess memory.</p> https://cve.radiocsirt.org/vuln/ghsa-6gw7-c226-vg73 https://cve.radiocsirt.org/vuln/gsd-2019-9516 gsd-2019-9516 https://cve.radiocsirt.org/vuln/gsd-2019-9516 https://cve.radiocsirt.org/vuln/msrc_cve-2019-9516 msrc_CVE-2019-9516 https://cve.radiocsirt.org/vuln/msrc_cve-2019-9516 https://cve.radiocsirt.org/vuln/opensuse-su-2019:2114-1 <p>Security update for nodejs10</p> <p>Security update for nodejs10</p> https://cve.radiocsirt.org/vuln/opensuse-su-2019:2114-1 https://cve.radiocsirt.org/vuln/rhsa-2019:2745 <p>HTTP/2: large amount of data requests leads to denial of service HTTP/2: flood using PRIORITY frames results in excessive resource consumption HTTP/2: 0-length headers lead to denial of service</p> <p>HTTP/2: large amount of data requests leads to denial of service HTTP/2: flood using PRIORITY frames results in excessive resource consumption HTTP/2: 0-length headers lead to denial of service</p> https://cve.radiocsirt.org/vuln/rhsa-2019:2745 https://cve.radiocsirt.org/vuln/suse-su-2019:14246-1 <p>Security update for Mozilla Firefox</p> <p>Security update for Mozilla Firefox</p> https://cve.radiocsirt.org/vuln/suse-su-2019:14246-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-9516 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: nginx, Ubuntu:18.04:LTS: nginx</p> <p>Some HTTP/2 implementations are vulnerable to a header leak, potentially leading to a denial of service. The attacker sends a stream of headers with a 0-length header name and 0-length header value, optionally Huffman encoded into 1-byte or greater headers. Some implementations allocate memory for these headers and keep the allocation alive until the session dies. This can consume excess memory.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: nginx, Ubuntu:18.04:LTS: nginx</p> <p>Some HTTP/2 implementations are vulnerable to a header leak, potentially leading to a denial of service. The attacker sends a stream of headers with a 0-length header name and 0-length header value, optionally Huffman encoded into 1-byte or greater headers. Some implementations allocate memory for these headers and keep the allocation alive until the session dies. This can consume excess memory.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-9516 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1050 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in nginx ausnutzen, um einen Denial of Service Angriff durchzuführen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in nginx ausnutzen, um einen Denial of Service Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1050