VDB
GCVE-110-MAGEIA-2024-135
GCVE-110-MAGEIA-2024-135
Advisory Published
nghttp2 library keeps reading the unbounded number of HTTP/2
CONTINUATION frames even after a stream is reset to keep HPACK context
in sync. This causes excessive CPU usage to decode HPACK stream.
This update fixes the issue.
This is the latest release, which will bring some more fixes and
improvements.
Affected Products
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| Mageia | nghttp2 | 0 (affected), 1.61.0-1.mga9 (unaffected) | — |
Browse GCVE Records
858 records in the GCVE database · Updated October 29, 2026
No matching records found.
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.