USN-4099-1

Details

Jonathan Looney discovered that nginx incorrectly handled the HTTP/2 implementation. A remote attacker could possibly use this issue to consume resources, leading to a denial of service.

Affected Packages

nginx

Ubuntu 16.04 LTS

Fixed in:

1.10.3-0ubuntu0.16.04.4

nginx

Ubuntu 18.04 LTS

Fixed in:

1.14.0-0ubuntu1.4

References

REPORT

https://ubuntu.com/security/CVE-2019-9511

REPORT

https://ubuntu.com/security/CVE-2019-9513

REPORT

https://ubuntu.com/security/CVE-2019-9516

ADVISORY

https://ubuntu.com/security/notices/USN-4099-1