| Package | Affected versions | Patched versions |
|---|---|---|
| http server | ≥ 2.4.17, < 2.4.59 | 2.4.59 |
| ontap | = 9 |
HTTP/2 incoming headers exceeding the limit are temporarily buffered in nghttp2 in order to generate an informative HTTP 413 response. If a client does not stop sending headers, this leads to memory exhaustion.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free