p PatchFirst

CVE-2018-0608

CVE-2018-0608

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Buffer overflow in H2O version 2.2.4 and earlier allows remote attackers to execute arbitrary code or cause a denial of service (DoS) via unspecified vectors.

CVSS 9.8 · Critical · EPSS 3.8% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • h2o

    Versions
    • version 2.2.4 and earlier: Affected

    No fix published

  • h2o Debian:12

    Affected ranges
    • ECOSYSTEM: < 2.2.5+dfsg1-1

    Update to 2.2.5+dfsg1-1

  • h2o Ubuntu:Pro:18.04:LTS

    Versions
    • 2.2.3+dfsg-2
    • 2.2.4+dfsg-1
    • 2.2.4+dfsg-1build1
    • 2.2.4+dfsg-1ubuntu0.1~esm2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

Original sources

Check your server →