suse · CVE-2016-1544

Quick triage

View at Official suse advisory, NVD, CVE.org · CVE detail

Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.

Tracker summary

CVE-2016-1544 severity low: SUSE including 290 source package names (26.268:libnghttp2-14-1.39.2-3.5.1, 6.5.151:libnghttp2-14-1.39.2-3.5.1, …), 411 product×package rows across 77 product lines (Container suse/ltss/sle12.5/sles12sp5, Container suse/sles12sp4, … (77 product lines)): Fixed 204, Known Affected 157, Known Not Affected 50.

Description:

nghttp2 before 1.7.1 allows remote attackers to cause a denial of service (memory exhaustion).