[UPDATE] [mittel] nghttp2: Schwachstelle ermöglicht Denial of Service

Kurzinfo

Metadaten

Original (extern): Link oeffnen
Veroeffentlicht: 2026-10-15 13:13 UTC
Importiert: 2026-10-16 09:36 UTC
CVSS: 7.5
Quelle-ID: cert_bund
uid_hash: 548b5b5ccd6259afdaca939ff01aca97f03fc16ea93ac1801f013ab2a52ff1e8

CERT-Bund (BSI)

Inhalt

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in nghttp2 ausnutzen, um einen Denial of Service Angriff durchzuführen.

Verknuepfte CVEs

CVE-ID	Severity (Quelle)	CVSS (Quelle)	Severity (CVE.org)	CVSS (CVE.org)	EPSS	EPSS-Pctl	Veroeffentlicht (CVE.org)
CVE-2026-27135	HIGH	7.5	HIGH	7.5			2026-03-18

Externe Referenzen

Bezeichnung	Typ	CVE	Quelle
Oracle Linux Security Advisory ELSA-2026-47058 vom 2026-08-01	EXTERNAL	-	wid_csaf
Red Hat Security Advisory RHSA-2026:10065 vom 2026-04-23	VENDOR	-	wid_csaf
Red Hat Security Advisory RHSA-2026:11768 vom 2026-04-29	VENDOR	-	wid_csaf
Red Hat Security Advisory RHSA-2026:13812 vom 2026-05-05	VENDOR	-	wid_csaf
Red Hat Security Advisory RHSA-2026:14391 vom 2026-05-07	VENDOR	-	wid_csaf
Red Hat Security Advisory vom 2026-05-13	VENDOR	-	wid_csaf
Red Hat Security Advisory RHSA-2026:14937 vom 2026-05-08	VENDOR	-	wid_csaf
Red Hat Security Advisory RHSA-2026:15087 vom 2026-05-13	VENDOR	-	wid_csaf
Red Hat Security Advisory RHSA-2026:17596 vom 2026-05-20	VENDOR	-	wid_csaf
Red Hat Security Advisory RHSA-2026:19724 vom 2026-05-21	VENDOR	-	wid_csaf
Red Hat Security Advisory RHSA-2026:20040 vom 2026-05-27	VENDOR	-	wid_csaf
Red Hat Security Advisory RHSA-2026:20087 vom 2026-05-29	VENDOR	-	wid_csaf
Red Hat Security Advisory RHSA-2026:21656 vom 2026-06-03	VENDOR	-	wid_csaf
Red Hat Security Advisory RHSA-2026:21690 vom 2026-06-04	VENDOR	-	wid_csaf
Red Hat Security Advisory RHSA-2026:21695 vom 2026-06-04	VENDOR	-	wid_csaf
Red Hat Security Advisory RHSA-2026:25096 vom 2026-06-10	VENDOR	-	wid_csaf
Red Hat Security Advisory RHSA-2026:7666 vom 2026-04-13	VENDOR	-	wid_csaf
Red Hat Security Advisory RHSA-2026:7667 vom 2026-04-13	VENDOR	-	wid_csaf
Red Hat Security Advisory RHSA-2026:7668 vom 2026-04-13	VENDOR	-	wid_csaf
Red Hat Security Advisory RHSA-2026:7670 vom 2026-04-13	VENDOR	-	wid_csaf
Red Hat Security Advisory RHSA-2026:77939 vom 2026-10-11	VENDOR	-	wid_csaf
Red Hat Security Advisory RHSA-2026:7983 vom 2026-04-14	VENDOR	-	wid_csaf
Red Hat Security Advisory RHSA-2026:82888 vom 2026-10-14	VENDOR	-	wid_csaf
Red Hat Security Advisory RHSA-2026:8339 vom 2026-04-15	VENDOR	-	wid_csaf
Red Hat Security Advisory RHSA-2026:8538 vom 2026-04-16	VENDOR	-	wid_csaf
Red Hat Security Advisory RHSA-2026:8539 vom 2026-04-16	VENDOR	-	wid_csaf
Red Hat Security Advisory RHSA-2026:8540 vom 2026-04-16	VENDOR	-	wid_csaf
Red Hat Security Advisory RHSA-2026:8541 vom 2026-04-16	VENDOR	-	wid_csaf
Red Hat Security Advisory RHSA-2026:8545 vom 2026-04-16	VENDOR	-	wid_csaf
Red Hat Security Advisory RHSA-2026:8546 vom 2026-04-16	VENDOR	-	wid_csaf
Red Hat Security Advisory RHSA-2026:8547 vom 2026-04-16	VENDOR	-	wid_csaf
Red Hat Security Advisory RHSA-2026:8548 vom 2026-04-16	VENDOR	-	wid_csaf
Red Hat Security Advisory RHSA-2026:8868 vom 2026-04-20	VENDOR	-	wid_csaf
Red Hat Security Advisory RHSA-2026:9711 vom 2026-04-22	VENDOR	-	wid_csaf
Red Hat Security Advisory RHSA-2026:9832 vom 2026-04-22	VENDOR	-	wid_csaf
Red Hat Security Advisory RHSA-2026:9874 vom 2026-04-22	VENDOR	-	wid_csaf
Amazon Linux Security Advisory ALAS2-2026-3232 vom 2026-04-14	EXTERNAL	-	wid_csaf
Siemens Security Advisory SSA-019113 vom 2026-07-14	EXTERNAL	-	wid_csaf
Google Container-Optimized OS release notes vom 2026-04-04	EXTERNAL	-	wid_csaf
Rocky Linux Security Advisory RLSA-2026:7666 vom 2026-04-15	EXTERNAL	-	wid_csaf
Rocky Linux Security Advisory RLSA-2026:7667 vom 2026-04-16	EXTERNAL	-	wid_csaf
Rocky Linux Security Advisory RLSA-2026:7668 vom 2026-04-15	EXTERNAL	-	wid_csaf
Rocky Linux Security Advisory RLSA-2026:7670 vom 2026-04-13	EXTERNAL	-	wid_csaf
Rocky Linux Security Advisory RLSA-2026:7896 vom 2026-04-14	EXTERNAL	-	wid_csaf
Rocky Linux Security Advisory RLSA-2026:8339 vom 2026-04-16	EXTERNAL	-	wid_csaf
nghttp2 GitHub Security Advisory GHSA-6933-cjhr-5qg6 vom 2026-03-17	EXTERNAL	-	wid_csaf
Oracle Linux Security Advisory ELSA-2026-7666 vom 2026-04-13	EXTERNAL	-	wid_csaf
Oracle Linux Security Advisory ELSA-2026-7667 vom 2026-04-13	EXTERNAL	-	wid_csaf
Oracle Linux Security Advisory ELSA-2026-7668 vom 2026-04-13	EXTERNAL	-	wid_csaf
Debian Security Advisory DSA-6266 vom 2026-05-14	EXTERNAL	-	wid_csaf
openSUSE Security Update OPENSUSE-SU-2026:11121-1 vom 2026-06-27	EXTERNAL	-	wid_csaf
SUSE Security Update SUSE-SU-2026:20925-1 vom 2026-04-01	EXTERNAL	-	wid_csaf
SUSE Security Update SUSE-SU-2026:1247-1 vom 2026-04-10	EXTERNAL	-	wid_csaf
SUSE Security Update SUSE-SU-2026:1350-1 vom 2026-04-15	EXTERNAL	-	wid_csaf
SUSE Security Update SUSE-SU-2026:1056-1 vom 2026-03-26	EXTERNAL	-	wid_csaf
SUSE Security Update SUSE-SU-2026:1074-1 vom 2026-03-26	EXTERNAL	-	wid_csaf
SUSE Security Update SUSE-SU-2026:20870-1 vom 2026-03-27	EXTERNAL	-	wid_csaf
SUSE Security Update SUSE-SU-2026:20833-1 vom 2026-03-28	EXTERNAL	-	wid_csaf
NetApp Security Advisory NTAP-20260717-0011 vom 2026-07-17	EXTERNAL	-	wid_csaf
Ubuntu Security Notice USN-8233-1 vom 2026-05-05	EXTERNAL	-	wid_csaf
Ubuntu Security Notice USN-8233-2 vom 2026-05-06	EXTERNAL	-	wid_csaf
Dell Security Advisory DSA-2026-386 vom 2026-09-01	EXTERNAL	-	wid_csaf
Dell Security Advisory DSA-2026-313 vom 2026-09-04	EXTERNAL	-	wid_csaf
IBM Security Bulletin 7272299 vom 2026-05-07	EXTERNAL	-	wid_csaf
IBM Security Bulletin 7273145 vom 2026-05-15	EXTERNAL	-	wid_csaf
IBM Security Bulletin 7273338 vom 2026-05-18	EXTERNAL	-	wid_csaf
IBM Security Bulletin 7278708 vom 2026-07-01	EXTERNAL	-	wid_csaf

Quellen-Details

Bezeichnung	Name	Kategorie	Tags	Zielgruppe	Sprache	Feed-URL
CERT-Bund (BSI)	cert_bund	government_cert		-	de	https://wid.cert-bund.de/content/public/securityAdvisory/rss

Zurueck zur Eintrags-Liste