In various realization protocols HTTP/2 is revealed 8 DoS-vulnerabilities

@OpenNet
Show original
Researchers from companies Netflix, Inc. and Google Inc. revealed in various realization protocols HTTP/2 eight vulnerabilities which allow to cause refusal in service through sending definitely issued stream of network inquiries. On issues to some extent touch on the majority of HTTP servers with support of HTTP/2 and lead to exhaustion of memory available to working process or creation of too high load of Tsentralnoe obrabatyvayushchee ustroystvo (CPU). Updatings with elimination of vulnerabilities are already presented to nginx 1.16.1/1.17.3 and H2O 2.2.6 but while are inaccessible to Apache httpd and other products...
Analysis
×
Google
Main activity:Science and education
153
Netflix
Organizations
29
Manufactured by:Intel
31