Wind River Support Network

HomeDefectsLIN9-7755
Fixed

LIN9-7755 : Security Advisory - nginx - CVE-2018-16844

Created: Nov 16, 2018    Updated: Dec 13, 2018
Resolved Date: Nov 22, 2018
Found In Version: 9.0.0.19
Fix Version: 9.0.0.19
Severity: Standard
Applicable for: Wind River Linux 9
Component/s: Userspace

Description

nginx before versions 1.15.6 and 1.14.1 has a vulnerability in the implementation of HTTP/2 that can allow for excessive CPU usage. This issue affects nginx compiled with the ngx_http_v2_module (not compiled by default) if the 'http2' option of the 'listen' directive is used in a configuration file.

https://nvd.nist.gov/vuln/detail/CVE-2018-16844

Other Downloads


CVEs


Live chat
Online