It was discovered that nghttp2 incorrectly handled the HTTP/2 implementation. A remote attacker could possibly use this issue to cause nghttp2 to consume resources, leading to a denial of service. This issue only affected Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. (CVE-2019-9511, CVE-2019-9513)
It was discovered that nghttp2 incorrectly handled request cancellation. A remote attacker could possibly use this issue to cause nghttp2 to consume resources, leading to a denial of service. This issue only affected Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. (CVE-2023-44487)
It was discovered that nghttp2 could be made to process an unlimited number of HTTP/2 CONTINUATION frames. A remote attacker could possibly use this issue to cause nghttp2 to consume resources, leading to a denial of service. (CVE-2024-28182)
{ "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro", "binaries": [ { "libnghttp2-14-dbgsym": "1.7.1-1ubuntu0.1~esm2", "nghttp2": "1.7.1-1ubuntu0.1~esm2", "libnghttp2-14": "1.7.1-1ubuntu0.1~esm2", "libnghttp2-dev": "1.7.1-1ubuntu0.1~esm2", "nghttp2-client-dbgsym": "1.7.1-1ubuntu0.1~esm2", "libnghttp2-doc": "1.7.1-1ubuntu0.1~esm2", "nghttp2-proxy": "1.7.1-1ubuntu0.1~esm2", "nghttp2-server": "1.7.1-1ubuntu0.1~esm2", "nghttp2-client": "1.7.1-1ubuntu0.1~esm2", "nghttp2-server-dbgsym": "1.7.1-1ubuntu0.1~esm2", "nghttp2-proxy-dbgsym": "1.7.1-1ubuntu0.1~esm2" } ] }
{ "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro", "binaries": [ { "libnghttp2-14-dbgsym": "1.30.0-1ubuntu1+esm2", "nghttp2": "1.30.0-1ubuntu1+esm2", "libnghttp2-14": "1.30.0-1ubuntu1+esm2", "libnghttp2-dev": "1.30.0-1ubuntu1+esm2", "nghttp2-client-dbgsym": "1.30.0-1ubuntu1+esm2", "libnghttp2-doc": "1.30.0-1ubuntu1+esm2", "nghttp2-proxy": "1.30.0-1ubuntu1+esm2", "nghttp2-server": "1.30.0-1ubuntu1+esm2", "nghttp2-client": "1.30.0-1ubuntu1+esm2", "nghttp2-server-dbgsym": "1.30.0-1ubuntu1+esm2", "nghttp2-proxy-dbgsym": "1.30.0-1ubuntu1+esm2" } ] }
{ "availability": "No subscription required", "binaries": [ { "libnghttp2-14-dbgsym": "1.40.0-1ubuntu0.3", "nghttp2": "1.40.0-1ubuntu0.3", "libnghttp2-14": "1.40.0-1ubuntu0.3", "libnghttp2-dev": "1.40.0-1ubuntu0.3", "nghttp2-client-dbgsym": "1.40.0-1ubuntu0.3", "libnghttp2-doc": "1.40.0-1ubuntu0.3", "nghttp2-proxy": "1.40.0-1ubuntu0.3", "nghttp2-server": "1.40.0-1ubuntu0.3", "nghttp2-client": "1.40.0-1ubuntu0.3", "nghttp2-server-dbgsym": "1.40.0-1ubuntu0.3", "nghttp2-proxy-dbgsym": "1.40.0-1ubuntu0.3" } ] }
{ "availability": "No subscription required", "binaries": [ { "libnghttp2-14-dbgsym": "1.43.0-1ubuntu0.2", "nghttp2": "1.43.0-1ubuntu0.2", "libnghttp2-14": "1.43.0-1ubuntu0.2", "libnghttp2-dev": "1.43.0-1ubuntu0.2", "nghttp2-client-dbgsym": "1.43.0-1ubuntu0.2", "libnghttp2-doc": "1.43.0-1ubuntu0.2", "nghttp2-proxy": "1.43.0-1ubuntu0.2", "nghttp2-server": "1.43.0-1ubuntu0.2", "nghttp2-client": "1.43.0-1ubuntu0.2", "nghttp2-server-dbgsym": "1.43.0-1ubuntu0.2", "nghttp2-proxy-dbgsym": "1.43.0-1ubuntu0.2" } ] }
{ "availability": "No subscription required", "binaries": [ { "libnghttp2-14-dbgsym": "1.55.1-1ubuntu0.2", "nghttp2": "1.55.1-1ubuntu0.2", "libnghttp2-14": "1.55.1-1ubuntu0.2", "libnghttp2-dev": "1.55.1-1ubuntu0.2", "nghttp2-client-dbgsym": "1.55.1-1ubuntu0.2", "libnghttp2-doc": "1.55.1-1ubuntu0.2", "nghttp2-proxy": "1.55.1-1ubuntu0.2", "nghttp2-server": "1.55.1-1ubuntu0.2", "nghttp2-client": "1.55.1-1ubuntu0.2", "nghttp2-server-dbgsym": "1.55.1-1ubuntu0.2", "nghttp2-proxy-dbgsym": "1.55.1-1ubuntu0.2" } ] }