Description
The idle stream handling in nghttp2 before 1.6.0 allows attackers to have unspecified impact via unknown vectors, aka a heap-use-after-free bug.
References (15)
Core 15
Core References
Mailing List vendor-advisory
x_refsource_apple
http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html
Third Party Advisory vendor-advisory
x_refsource_gentoo
https://security.gentoo.org/glsa/201612-06
Vendor Advisory x_refsource_confirm
https://support.apple.com/HT206168
Mailing List mailing-list
x_refsource_mlist
http://www.openwall.com/lists/oss-security/2015/12/23/10
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://www.securitytracker.com/id/1035353
Mailing List mailing-list
x_refsource_mlist
http://www.openwall.com/lists/oss-security/2015/12/23/6
Mailing List vendor-advisory
x_refsource_apple
http://lists.apple.com/archives/security-announce/2016/Mar/msg00000.html
Mailing List, Third Party Advisory vendor-advisory
x_refsource_fedora
http://lists.fedoraproject.org/pipermail/package-announce/2016-January/175085.html
Mailing List vendor-advisory
x_refsource_apple
http://lists.apple.com/archives/security-announce/2016/Mar/msg00001.html
Patch, Vendor Advisory x_refsource_confirm
https://nghttp2.org/blog/2015/12/23/nghttp2-v1-6-0/
Mailing List, Third Party Advisory vendor-advisory
x_refsource_fedora
http://lists.fedoraproject.org/pipermail/package-announce/2016-January/175423.html
Mailing List vendor-advisory
x_refsource_apple
http://lists.apple.com/archives/security-announce/2016/Mar/msg00002.html
Vendor Advisory x_refsource_confirm
https://support.apple.com/HT206169
Vendor Advisory x_refsource_confirm
https://support.apple.com/HT206166
Vendor Advisory x_refsource_confirm
https://support.apple.com/HT206167
Scores
CVSS v3
10.0
EPSS
0.0407
EPSS Percentile
89.5%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Details
CWE
CWE-119
Status
published
Products (5)
apple/iphone_os
< 9.2.1
apple/mac_os_x
< 10.11.3
apple/tvos
< 9.1
apple/watchos
< 2.1
nghttp2/nghttp2
< 1.5.0
Published
Jan 12, 2016
Tracked Since
Feb 18, 2026