Vulnerabilities > Dena > H2O > Critical

DATE CVE VULNERABILITY TITLE RISK
2018-06-26 CVE-2018-0608 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Dena H2O
Buffer overflow in H2O version 2.2.4 and earlier allows remote attackers to execute arbitrary code or cause a denial of service (DoS) via unspecified vectors.
network
low complexity
dena CWE-119
critical
9.8
2017-06-09 CVE-2016-7835 Use After Free vulnerability in multiple products
Use-after-free vulnerability in H2O allows remote attackers to cause a denial-of-service (DoS) or obtain server certificate private keys and possibly other information.
network
low complexity
h2o-project dena CWE-416
critical
9.1