Nghttp2 - Nghttp2 CVE

Filtered by vendor Nghttp2 Subscribe

Filtered by product Nghttp2

ALL

NONE (0.0) LOW (0.1 - 3.9) MEDIUM (4.0 - 6.9) HIGH (7.0 - 8.9) CRITICAL (9.0 - 10.0)

Total 1 CVE

CVE	Vendors	Products	Updated	CVSS v2	CVSS v3
CVE-2015-8659	2 Apple, Nghttp2	5 Iphone Os, Mac Os X, Tvos and 2 more	2019-03-08	10.0 HIGH	10.0 CRITICAL
The idle stream handling in nghttp2 before 1.6.0 allows attackers to have unspecified impact via unknown vectors, aka a heap-use-after-free bug.

Vulnerabilities (CVE)