[Forgot Password]
Login  Register Subscribe

30430

 
 

423868

 
 

247974

 
 

909

 
 

194654

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

CVE-2019-9516 -- nginx

ID: oval:org.secpod.oval:def:58064Date: (C)2019-10-10   (M)2024-04-17
Class: VULNERABILITYFamily: unix




This sends a stream of headers with a 0-length header name and 0-length header value, optionally Huffman encoded into 1-byte or greater headers. Some implementations allocate memory for these headers and keep the allocation alive until the session dies. This can consume excess memory, potentially leading to a Denial-of-Service. Also known as "HTTP/20-Length Headers Leak".

Platform:
Ubuntu 16.04
Ubuntu 18.04
Product:
nginx
Reference:
CVE-2019-9516
CVE    1
CVE-2019-9516
CPE    4
cpe:/o:ubuntu:ubuntu_linux:16.04
cpe:/o:ubuntu:ubuntu_linux:18.04
cpe:/a:nginx:nginx
cpe:/o:ubuntu:ubuntu_linux:19.04
...

© SecPod Technologies