NVD

Id
28740  
Name
CVE-2015-8659  
Description
The idle stream handling in nghttp2 before 1.6.0 allows attackers to have unspecified impact via unknown vectors, aka a heap-use-after-free bug.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2016-01-12  
Modified Date
2016-12-07  
Seq
2015-8659  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
151247 28740 CVE-2015-8659 APPLE-SA-2016-03-21-1  View
151248 28740 CVE-2015-8659 APPLE-SA-2016-03-21-2  View
151249 28740 CVE-2015-8659 APPLE-SA-2016-03-21-3  View
151250 28740 CVE-2015-8659 APPLE-SA-2016-03-21-5  View
151251 28740 CVE-2015-8659 FEDORA-2016-54f85ec6e8  View
151252 28740 CVE-2015-8659 FEDORA-2016-8e13ac5754  View
151253 28740 CVE-2015-8659 [oss-security] 20151223 Re: Use after free in nghttp2  View
151254 28740 CVE-2015-8659 [oss-security] 20151223 Use after free in nghttp2  View
151255 28740 CVE-2015-8659 1035353  View
151256 28740 CVE-2015-8659 https://nghttp2.org/blog/2015/12/23/nghttp2-v1-6-0/  View
151257 28740 CVE-2015-8659 https://support.apple.com/HT206166  View
151258 28740 CVE-2015-8659 https://support.apple.com/HT206167  View
151259 28740 CVE-2015-8659 https://support.apple.com/HT206168  View
151260 28740 CVE-2015-8659 https://support.apple.com/HT206169  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
11492 JVNDB-2015-006812 nghttp2 のアイドル状態のストリーム処理における脆弱性 nghttp2 のアイドル状態のストリーム処理には、不特定の影響を受ける脆弱性が存在します。 CVE-2015-8659 85884 CVE-2015-8659 28740 10 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-006812.html 2015-12-23 2016-03-29 View