Wind River Support Network

HomeDefectsLIN8-10081
Fixed

LIN8-10081 : Security Advisory - nginx - CVE-2018-16844

Created: Nov 16, 2018    Updated: Dec 13, 2018
Resolved Date: Nov 26, 2018
Found In Version: 8.0.0.28
Fix Version: 8.0.0.28
Severity: Standard
Applicable for: Wind River Linux 8
Component/s: Userspace

Description

nginx before versions 1.15.6 and 1.14.1 has a vulnerability in the implementation of HTTP/2 that can allow for excessive CPU usage. This issue affects nginx compiled with the ngx_http_v2_module (not compiled by default) if the 'http2' option of the 'listen' directive is used in a configuration file.

https://nvd.nist.gov/vuln/detail/CVE-2018-16844

Other Downloads


CVEs


Live chat
Online