CVE-2017-10868
H2O version 2.2.2 and earlier allows remote attackers to cause a denial of service in the server via specially crafted HTTP/1 header.
- Score
- CVSS 3.1 7.5 High
- Status
- Modified - vultures@jpcert.or.jp
- Published
- 2017-12-22
- Last modified
- 2024-08-05
- Weaknesses
- CWE-20
Affected products
- H2o (Dena)
- H2o (Kazuho Oku)
References
- https://github.com/h2o/h2o/issues/1459
- https://jvn.jp/en/jp/JVN84182676/index.html
