An update of the nghttp2 package has been released.

The version of nghttp2 installed on the remote host is prior to 1.41.0-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2023-2180 advisory.

    Envoy is a cloud-native high-performance edge/middle/service proxy. Envoy's HTTP/2 codec may leak a header     map and bookkeeping structures upon receiving `RST_STREAM` immediately followed by the `GOAWAY` frames     from an upstream server. In nghttp2, cleanup of pending requests due to receipt of the `GOAWAY` frame     skips de-allocation of the bookkeeping structure and pending compressed header. The error return [code     path] is taken if connection is already marked for not sending more requests due to `GOAWAY` frame. The     clean-up code is right after the return statement, causing memory leak. Denial of service through memory     exhaustion. This vulnerability was patched in versions(s) 1.26.3, 1.25.8, 1.24.9, 1.23.11.
    (CVE-2023-35945)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:3997-1 advisory.

  - Envoy is a cloud-native high-performance edge/middle/service proxy. Envoy's HTTP/2 codec may leak a header     map and bookkeeping structures upon receiving `RST_STREAM` immediately followed by the `GOAWAY` frames     from an upstream server. In nghttp2, cleanup of pending requests due to receipt of the `GOAWAY` frame     skips de-allocation of the bookkeeping structure and pending compressed header. The error return [code     path] is taken if connection is already marked for not sending more requests due to `GOAWAY` frame. The     clean-up code is right after the return statement, causing memory leak. Denial of service through memory     exhaustion. This vulnerability was patched in versions(s) 1.26.3, 1.25.8, 1.24.9, 1.23.11.
    (CVE-2023-35945)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the nghttp2 package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - Envoy is a cloud-native high-performance edge/middle/service proxy. Envoy's HTTP/2 codec may leak a header     map and bookkeeping structures upon receiving `RST_STREAM` immediately followed by the `GOAWAY` frames     from an upstream server. In nghttp2, cleanup of pending requests due to receipt of the `GOAWAY` frame     skips de-allocation of the bookkeeping structure and pending compressed header. The error return [code     path] is taken if connection is already marked for not sending more requests due to `GOAWAY` frame. The     clean-up code is right after the return statement, causing memory leak. Denial of service through memory     exhaustion. This vulnerability was patched in versions(s) 1.26.3, 1.25.8, 1.24.9, 1.23.11.
    (CVE-2023-35945)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2024:0929 advisory.

    Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:

    CVE-2023-35945:
    Envoy is a cloud-native high-performance edge/middle/service proxy. Envoys HTTP/2 codec may leak a     header map and bookkeeping structures upon receiving `RST_STREAM` immediately followed by the `GOAWAY`     frames from an upstream server. In nghttp2, cleanup of pending requests due to receipt of the `GOAWAY`     frame skips de-allocation of the bookkeeping structure and pending compressed header. The error return     [code path] is taken if connection is already marked for not sending more requests due to `GOAWAY` frame.
    The clean-up code is right after the return statement, causing memory leak. Denial of service through     memory exhaustion. This vulnerability was patched in versions(s) 1.26.3, 1.25.8, 1.24.9, 1.23.11.

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
203589	Photon OS 5.0: Nghttp2 PHSA-2023-5.0-0126	Nessus	PhotonOS Local Security Checks	2024/7/23	2024/7/24	high
179772	Amazon Linux 2 : nghttp2 (ALAS-2023-2180)	Nessus	Amazon Linux Local Security Checks	2023/8/14	2024/12/11	high
182743	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : nghttp2 (SUSE-SU-2023:3997-1)	Nessus	SuSE Local Security Checks	2023/10/7	2023/10/7	high
188269	EulerOS 2.0 SP11 : nghttp2 (EulerOS-SA-2023-3015)	Nessus	Huawei Local Security Checks	2024/1/16	2024/1/16	high
239798	TencentOS Server 4: nghttp2 (TSSA-2024:0929)	Nessus	Tencent Local Security Checks	2025/6/16	2025/11/20	high
204004	Photon OS 3.0: Nghttp2 PHSA-2023-3.0-0673	Nessus	PhotonOS Local Security Checks	2024/7/24	2024/7/24	high

检测

插件搜索

high

high

high

high

high

high