Ouch - updates de serveurs web tantôt ? (8 New HTTP/2 Implementation Flaws Expose Websites to DoS Attacks)

Qui cherche trouve ...

Ça touche ceux qui hébergent des sites et services, pas le commun des Internautes.

8 New HTTP/2 Implementation Flaws Expose Websites to DoS Attacks

thehackernews.com http2-dos-vulnerability.jpg
thehackernews.com

Mais vu que "Apache, Microsoft's IIS, et NGINX" sont touchés, ça va chauffer dans les correctifs à installer:

According to CERT, affected vendors include NGINX, Apache, H2O, Nghttp2, Microsoft (IIS), Cloudflare, Akamai, Apple (SwiftNIO), Amazon, Facebook (Proxygen), Node.js, and Envoy proxy, many of which have already released security patches and advisories.

Haut de page