tocsin

Debian/libprotocol-http2-perl: high 7.5

Protocol::HTTP2 versions before 1.13 for Perl is vulnerable to a HTTP/2 Bomb. Protocol::HTTP2's inbound HPACK path has no header-list size limit, so a small HTTP/2 request can expand into large server

Action: Upgrade libprotocol-http2-perl to 1.12-2 or later.

Affected

introducedfixedlast affected
01.12-2-

Fixed versions

1.12-2

Sources

published · modified · JSON