CVE:CVE-2020-11080
CNNVD:CNNVD-202006-293
HTTP/2是超文本传输协议的第二版，主要用于保证客户机与服务器之间的通信。
HTTP/2 1.41.0之前版本中存在资源管理错误漏洞。攻击者可借助恶意的客户端构建14,400字节长度的SETTINGS帧利用该漏洞造成拒绝服务。
solution:Upgrade nghttp2 nghttp2 to a higher version than 1.41.0,and avoid the version (,1.41.0); Upgrade debian debian_linux to a higher version than 9.0,10.0,and avoid the version 9.0,10.0; Upgrade opensuse leap to a higher version than 15.1,and avoid the version 15.1; Upgrade fedoraproject fedora to a higher version than 31,33,and avoid the version 31,33; Upgrade oracle banking_extensibility_workbench to a higher version than 14.3.0,14.4.0,and avoid the version 14.3.0,14.4.0; Upgrade oracle blockchain_platform to a higher version than 21.1.2,and avoid the version (,21.1.2); Upgrade oracle enterprise_communications_broker to a higher version than 3.1.0,3.2.0,and avoid the version 3.1.0,3.2.0; Upgrade oracle graalvm to a higher version than 19.3.2,20.1.0,and avoid the version 19.3.2,20.1.0; Upgrade oracle mysql to a higher version than 7.3.30,7.4.29,7.5.19,7.6.15,8.0.21,and avoid the version [7.3.0,7.3.30],[7.4.0,7.4.29],[7.5.0,7.5.19],[7.6.0,7.6.15],[8.0.0,8.0.21]; Upgrade nodejs node.js to a higher version than 10.12.0,10.21.0,12.12.0,12.18.0,14.4.0,and avoid the version [10.0.0,10.12.0],[10.13.0,10.21.0),[12.0.0,12.12.0],[12.13.0,12.18.0),[14.0.0,14.4.0]