Known vulnerabilities in nghttp2 (Alpine package)

Vendor: Alpine Linux Development Team
Software: nghttp2 (Alpine package)
Software CPE: cpe:2.3:o:alpine:nghttp2_alpine_package:*:*:*:*:*:alpine_linux:*:*
Website: https://alpinelinux.org/
Total vulnerabilities: 2
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 7.2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting nghttp2 (Alpine package) nghttp2 (Alpine package) is affected by 2 known vulnerabilities: 2 medium Critical High Medium Low

Vulnerabilities (2)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU20197 - Resource exhaustion
CVE-2019-9513		 CWE-400 Medium
No
No
 1.35.1-r1, 1.39.2-r0 13.08.2019 SB2019081323
SB2019081326
SB2019081602
and 51 more
#VU20196 - Resource exhaustion
CVE-2019-9511		 CWE-400 Medium
No
No
 1.35.1-r1, 1.39.2-r0 13.08.2019 SB2019081323
SB2019081326
SB2019081602
and 55 more