Kazuho Oku H2O vulnerabilities
7 vulnerabilities
Known vulnerabilities in Kazuho Oku H2O, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
PrioritiseCVE-2018-0608kazuho oku · h2o +3 morekazuho oku h2oBuffer overflow in H2O version 2.2.4 and earlier allows remote attackers to execute arbitrary code or cause a denial of service (DoS) via unspecified vectors.CVSS9.8CriticalEPSS3.73%PrioritiseCVE-2017-10908kazuho oku · h2o +3 morekazuho oku h2oH2O version 2.2.3 and earlier allows remote attackers to cause a denial of service in the server via specially crafted HTTP/2 header.CVSS7.5HighEPSS3.64%RoutineCVE-2017-10872kazuho oku · h2o +3 morekazuho oku h2oH2O version 2.2.3 and earlier allows remote attackers to cause a denial of service in the server via unspecified vectors.CVSS6.5MediumEPSS1.94%PrioritiseCVE-2017-10869kazuho oku · h2o +2 morekazuho oku h2oBuffer overflow in H2O version 2.2.2 and earlier allows remote attackers to cause a denial-of-service in the server via unspecified vectors.CVSS7.5HighEPSS2.68%PrioritiseCVE-2017-10868kazuho oku · h2o +2 morekazuho oku h2oH2O version 2.2.2 and earlier allows remote attackers to cause a denial of service in the server via specially crafted HTTP/1 header.CVSS7.5HighEPSS3.53%PrioritiseCVE-2016-7835kazuho oku · h2o +2 morekazuho oku h2oUse-after-free vulnerability in H2O allows remote attackers to cause a denial-of-service (DoS) or obtain server certificate private keys and possibly other information.CVSS9.1CriticalEPSS2.23%PrioritiseCVE-2016-4864kazuho oku · h2o +1 morekazuho oku h2oH2O versions 2.0.3 and earlier and 2.1.0-beta2 and earlier allows remote attackers to cause a denial-of-service (DoS) via format string specifiers in a template file via fastcgi, mruby, proxy, redirect or reproxy.CVSS7.5HighEPSS1.80%