This update for nghttp2 fixes the following issues :

CVE-2020-11080: HTTP/2 Large Settings Frame DoS (bsc#1181358)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-6142-1 advisory.

    Gal Goldshtein discovered that nghttp2 incorrectly handled certain inputs. If a user or an automated     system were tricked into opening a specially crafted input file, a remote attacker could possibly use this     issue to cause a denial of service.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-5765 advisory.

    - x86/speculation: Add SRBDS vulnerability and mitigation documentation (Mark Gross)  [Orabug: 31446720]     {CVE-2020-0543}
    - x86/speculation: Add Special Register Buffer Data Sampling (SRBDS) mitigation (Mark Gross)  [Orabug:
    31446720]  {CVE-2020-0543}
    - x86/cpu: Add 'table' argument to cpu_matches() (Mark Gross)  [Orabug: 31446720]  {CVE-2020-0543}
    - x86/cpu: Add a steppings field to struct x86_cpu_id (Mark Gross)  [Orabug: 31446720]  {CVE-2020-0543}
    - Address Kata CVE-2020-2023
    - Address Kata CVE-2020-2024
    - Address Kata CVE-2020-2025
    - Address Kata CVE-2020-2026

    kata
    - Address CVE-2020-2023
    - Address CVE-2020-2024
    - Address CVE-2020-2025
    - Address CVE-2020-2026

    kubernetes
    - CVE-2020-8559: Privilege escalation from compromised node to cluster
    - CVE-2020-8557: Node disk DOS by writing to container /etc/hosts
    - Update dependency on Kata containers to a build that includes fixes for CVE-2020-2023 thru CVE-2020-2026

    kubernetes
    - CVE-2020-15104:
      Incorrect validation of wildcard DNS Subject Alternative Names
    - CVE-2020-8559: Privilege escalation from compromised node to cluster
    - CVE-2020-8557: Node disk DOS by writing to container /etc/hosts
    - Update Kubernetes to use Kata 1.7.3-1.0.7 to address CVE-2020-2023 thru CVE-2020-2026

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2022:0101 advisory.

    Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities:

    CVE-2019-9513:
    Some HTTP/2 implementations are vulnerable to resource loops, potentially leading to a denial of service.
    The attacker creates multiple request streams and continually shuffles the priority of the streams in a     way that causes substantial churn to the priority tree. This can consume excess CPU.

    CVE-2020-11080:
    In nghttp2 before version 1.41.0, the overly large HTTP/2 SETTINGS frame payload causes denial of service.
    The proof of concept attack involves a malicious client constructing a SETTINGS frame with a length of     14,400 bytes (2400 individual settings entries) over and over again. The attack causes the CPU to spike at     100%. nghttp2 v1.41.0 fixes this vulnerability. There is a workaround to this vulnerability. Implement     nghttp2_on_frame_recv_callback callback, and if received frame is SETTINGS frame and the number of     settings entries are large (e.g., > 32), then drop the connection.

Tenable has extracted the preceding description block directly from the Alibaba Cloud Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

An update of the nodejs package has been released.

An update of the mysql package has been released.

ID	Name	Product	Family	Published	Updated	Severity
148149	SUSE SLED15 / SLES15 Security Update : nghttp2 (SUSE-SU-2021:0930-1)	Nessus	SuSE Local Security Checks	3/26/2021	1/8/2024	high
176745	Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS : nghttp2 vulnerability (USN-6142-1)	Nessus	Ubuntu Local Security Checks	6/6/2023	8/28/2024	high
180974	Oracle Linux 7 : Unbreakable Enterprise kernel-container kata-image kata-runtime kata kubernetes kubernetes istio olcne (ELSA-2020-5765)	Nessus	Oracle Linux Local Security Checks	9/7/2023	10/23/2024	high
236467	Alibaba Cloud Linux 3 : 0101: nghttp2 (ALINUX3-SA-2022:0101)	Nessus	Alibaba Cloud Linux Local Security Checks	5/14/2025	5/15/2025	high
203609	Photon OS 4.0: Nodejs PHSA-2023-4.0-0415	Nessus	PhotonOS Local Security Checks	7/23/2024	7/24/2024	high
148357	Photon OS 4.0: Mysql PHSA-2021-4.0-0007	Nessus	PhotonOS Local Security Checks	4/7/2021	8/22/2025	critical

Detections

Analytics

Plugins Search

high

high

high

high

high

critical