Skip to content

fix crash when handling malformed HTTP/2 request (CVE-2017-10908) #1544

Description

@kazuho

H2O up to version 2.2.3 may segfault when receiving a malformed HTTP/2 request. Users should update to 2.2.4.

Details TBD.

Server configurations that have only one host defined (in the hosts mapping) or have every host mapped to a different port is not affected by the issue.

The issue was reported by @Etsukata.

Metadata

Metadata

Assignees

No one assigned

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions