Description
nginx before versions 1.15.6 and 1.14.1 has a vulnerability in the implementation of HTTP/2 that can allow for excessive memory consumption. This issue affects nginx compiled with the ngx_http_v2_module (not compiled by default) if the 'http2' option of the 'listen' directive is used in a configuration file.
Remediation
References
Related Vulnerabilities
WordPress Plugin WP Prayer Cross-Site Request Forgery (1.5.4)
WordPress Plugin Event Single Page Templates Addon For The Events Calendar Security Bypass (1.5)
Drupal Core 7.x Multiple Vulnerabilities (7.0 - 7.28)
Oracle HTTP Server Other Vulnerability (CVE-2002-0659)
Liferay DXP Observable Discrepancy Vulnerability (CVE-2024-25146)