nghttp2 before 1.7.1 allows remote attackers to cause a denial of service (memory exhaustion).
{ "availability": "No subscription required", "ubuntu_priority": "untriaged", "binaries": [ { "binary_version": "1.7.1-1", "binary_name": "libnghttp2-14" }, { "binary_version": "1.7.1-1", "binary_name": "libnghttp2-14-dbgsym" }, { "binary_version": "1.7.1-1", "binary_name": "libnghttp2-dev" }, { "binary_version": "1.7.1-1", "binary_name": "libnghttp2-doc" }, { "binary_version": "1.7.1-1", "binary_name": "nghttp2" }, { "binary_version": "1.7.1-1", "binary_name": "nghttp2-client" }, { "binary_version": "1.7.1-1", "binary_name": "nghttp2-client-dbgsym" }, { "binary_version": "1.7.1-1", "binary_name": "nghttp2-proxy" }, { "binary_version": "1.7.1-1", "binary_name": "nghttp2-proxy-dbgsym" }, { "binary_version": "1.7.1-1", "binary_name": "nghttp2-server" }, { "binary_version": "1.7.1-1", "binary_name": "nghttp2-server-dbgsym" } ] }