CVE:CVE-2015-8659
CNNVD:CNNVD-201601-189
Nghttp2是一个用于实现HTTP/2的C库。
nghttp2 1.6.0之前版本的idle流处理代码中存在安全漏洞。目前尚无此漏洞的相关信息，请随时关注CNNVD或厂商公告。
solution:Upgrade apple mac_os_x to a higher version than 10.11.3,and avoid the version (,10.11.3]; Upgrade nghttp2 nghttp2 to a higher version than 1.5.0,and avoid the version (,1.5.0]; Upgrade apple iphone_os to a higher version than 9.2.1,and avoid the version (,9.2.1]; Upgrade apple tvos to a higher version than 9.1,and avoid the version (,9.1]; Upgrade apple watchos to a higher version than 2.1,and avoid the version (,2.1]