Vulnerabilityhigh

8 New HTTP/2 Implementation Flaws Expose Websites to DoS Attacks

The Hacker Newsby @TheHackersNewsAug 15, 2019 · 00:00 UTC (Aug 15, 2019)2 min read2 · 1 read

Read at thehackernews.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2019-9511 CVE-2019-9512 CVE-2019-9513 CVE-2019-9514 CVE-2019-9515 CVE-2019-9516 CVE-2017-9517 CVE-2019-9518

Tags: cve-2019-9511 cve-2019-9512 cve-2019-9513 cve-2019-9514 cve-2019-9515 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2017-9517	atmail before 7.8.0.2 has CSRF, allowing an attacker to upload and import users via CSV	8.8	<1%		Jun 8, 2017
CVE-2019-9515 +6 related CVEs CVE-2019-9512 CVE-2019-9514 CVE-2019-9513 CVE-2019-9511 CVE-2019-9518 CVE-2019-9516	Some HTTP/2 implementations are vulnerable to a settings flood, potentially leading to a denial of service	7.5 group max	87%		Aug 13, 2019

From the original article

2 min read at thehackernews.com

Various implementations of HTTP/2 , the latest version of the HTTP network protocol, have been found vulnerable to multiple security vulnerabilities affecting the most popular web server software, including Apache, Microsoft's IIS, and NGINX. Launched in May 2015, HTTP/2 has been designed for better security and improved online experience by speeding up page loads.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.