CVE-2016-1544
Fixed in a distro release EPSS <1%
nghttp2 before 1.7.1 allows remote attackers to cause a denial of service (memory exhaustion).
Products: nghttp2
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | nghttp2 | 1.7.1-1 |
| Debian 13 | nghttp2 | 1.7.1-1 |
| Debian 14 | nghttp2 | 1.7.1-1 |
| SUSE HPE Helion OpenStack 8 | nghttp2 | 1.39.2-3.5.1 |
| SUSE Linux Enterprise Server 12 SP2-BCL | nghttp2 | 1.39.2-3.5.1 |
| SUSE Linux Enterprise Server 12 SP2-LTSS | nghttp2 | 1.39.2-3.5.1 |
| SUSE Linux Enterprise Server 12 SP3-BCL | nghttp2 | 1.39.2-3.5.1 |
| SUSE Linux Enterprise Server 12 SP3-LTSS | nghttp2 | 1.39.2-3.5.1 |
| SUSE Linux Enterprise Server 12 SP4-LTSS | nghttp2 | 1.39.2-3.5.1 |
| SUSE Linux Enterprise Server 12 SP5 | nghttp2 | 1.39.2-3.5.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP2 | nghttp2 | 1.39.2-3.5.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | nghttp2 | 1.39.2-3.5.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP4 | nghttp2 | 1.39.2-3.5.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | nghttp2 | 1.39.2-3.5.1 |
| SUSE OpenStack Cloud 7 | nghttp2 | 1.39.2-3.5.1 |
| SUSE OpenStack Cloud 8 | nghttp2 | 1.39.2-3.5.1 |
| SUSE OpenStack Cloud 9 | nghttp2 | 1.39.2-3.5.1 |
| SUSE OpenStack Cloud Crowbar 8 | nghttp2 | 1.39.2-3.5.1 |
| SUSE OpenStack Cloud Crowbar 9 | nghttp2 | 1.39.2-3.5.1 |
| openSUSE Tumbleweed | nghttp2 | 1.17.0-1.1 |