VDB

GCVE-110-MAGEIA-2024-135

GCVE-110-MAGEIA-2024-135
Advisory Published
Vulnetix · Advisory published April 17, 2024
nghttp2 library keeps reading the unbounded number of HTTP/2 CONTINUATION frames even after a stream is reset to keep HPACK context in sync. This causes excessive CPU usage to decode HPACK stream. This update fixes the issue. This is the latest release, which will bring some more fixes and improvements.
Download JSON Open in Console

Affected Products

VendorProductVersionsPlatforms
Mageianghttp20 (affected), 1.61.0-1.mga9 (unaffected), 0 (affected), 1.61.0-1.mga9 (unaffected)—
Mageiadrakconf0 (affected), 13.29-1.1.mga9 (unaffected)—

References

Updated nghttp2 packages fix security vulnerability
advisory
Updated nghttp2 packages fix security vulnerability
issue
Updated nghttp2 packages fix security vulnerability
issue
Updated nghttp2 packages fix security vulnerability
issue
Updated drakconf packages fix displaying the icons in the right hand pane
advisory
Updated drakconf packages fix displaying the icons in the right hand pane
issue
Updated drakconf packages fix displaying the icons in the right hand pane
issue
Updated drakconf packages fix displaying the icons in the right hand pane
issue

Browse GCVE Records

73,873 records in the GCVE database · Updated July 20, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON
$ Console Community · 100/wk Open console ›