Skip to content
fr Sign in
7.5 High

CVE-2026-27135 nghttp2 is an implementation of the Hypertext Transfer Protocol version 2 in C

Description

nghttp2 is an implementation of the Hypertext Transfer Protocol version 2 in C. Prior to version 1.68.1, the nghttp2 library stops reading the incoming data when user facing public API `nghttp2_session_terminate_session` or `nghttp2_session_terminate_session2` is called by the application. They might be called internally by the library when it detects the situation that is subject to connection error. Due to the missing internal state validation, the library keeps reading the rest of the data after one of those APIs is called. Then receiving a malformed frame that causes FRAME_SIZE_ERROR causes assertion failure. nghttp2 v1.68.1 adds missing state validation to avoid assertion failure. No known workarounds are available.

Affected products and versions

Product Affected versions Fixed in
nghttp2 1.68 earliest → < 1.68.1 1.68.1
Red Hat JBoss Core Services on RHEL 7 Server Versions not published
Red Hat JBoss Core Services on RHEL 8 Versions not published
Red Hat OpenShift Container Platform 4.12 412.86 earliest → < 412.86.202605271418-0 412.86.202605271418-0
Middleware Containers for OpenShift Versions not published
Red Hat OpenShift Container Platform 4.13 413.92 earliest → < 413.92.202605271328-0 413.92.202605271328-0
Red Hat OpenShift Container Platform 4.14 414.92 earliest → < 414.92.202605060243-0 414.92.202605060243-0
Red Hat OpenShift Container Platform 4.15 415.92 earliest → < 415.92.202605060220-0 415.92.202605060220-0
Red Hat OpenShift Container Platform 4.16 416.94 earliest → < 416.94.202605200242-0 416.94.202605200242-0
Show the 60 other branches
Product Affected versions Fixed in
Red Hat OpenShift Container Platform 4.17 417.94 earliest → < 417.94.202605112123-0 417.94.202605112123-0
Red Hat OpenShift Container Platform 4.18 418.94 earliest → < 418.94.202605260517-0 418.94.202605260517-0
Red Hat OpenShift Container Platform 4.19 4.19 earliest → < 4.19.9.6.202605201155-0 4.19.9.6.202605201155-0
Red Hat Enterprise Linux AppStream EUS (v. 10.0) Versions not published
Red Hat Enterprise Linux AppStream (v. 10) Versions not published
Red Hat Enterprise Linux AppStream (v. 8) Versions not published
Red Hat Enterprise Linux AppStream EUS (v.9.4) Versions not published
Red Hat Enterprise Linux AppStream EUS (v.9.6) Versions not published
Red Hat Enterprise Linux AppStream (v. 9) Versions not published
Red Hat Enterprise Linux BaseOS EUS (v. 10.0) Versions not published
Red Hat Enterprise Linux BaseOS (v. 10) Versions not published
Red Hat Enterprise Linux BaseOS (v. 8) Versions not published
Red Hat Enterprise Linux BaseOS AUS (v. 8.2) Versions not published
Red Hat Enterprise Linux BaseOS AUS (v.8.4) Versions not published
Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.4) Versions not published
Red Hat Enterprise Linux BaseOS AUS (v.8.6) Versions not published
Red Hat Enterprise Linux BaseOS E4S (v.8.6) Versions not published
Red Hat Enterprise Linux BaseOS TUS (v.8.6) Versions not published
Red Hat Enterprise Linux BaseOS E4S (v.8.8) Versions not published
Red Hat Enterprise Linux BaseOS TUS (v.8.8) Versions not published
Red Hat Enterprise Linux BaseOS E4S (v.9.0) Versions not published
Red Hat Enterprise Linux BaseOS E4S (v.9.2) Versions not published
Red Hat Enterprise Linux BaseOS EUS (v.9.4) Versions not published
Red Hat Enterprise Linux BaseOS EUS (v.9.6) Versions not published
Red Hat Enterprise Linux BaseOS (v. 9) Versions not published
Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0) Versions not published
Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) Versions not published
Red Hat Enterprise Linux CRB (v. 8) Versions not published
Red Hat CodeReady Linux Builder EUS (v.9.4) Versions not published
Red Hat CodeReady Linux Builder EUS (v.9.6) Versions not published
Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) Versions not published
Red Hat AI Inference Server 3.2 1780681984 earliest → < 1780681984 1780681984
Red Hat AI Inference Server 3.3 1778244546 earliest → < 1778244546 1778244546
Red Hat Discovery 2 1778156756 earliest → < 1778156756 1778156756
Red Hat Hardened Images 1.68 earliest → < 1.68.1-1.hum1 1.68.1-1.hum1
Red Hat Insights proxy 1.5 1776868961 earliest → < 1776868961 1776868961
Red Hat JBoss Core Services 2.4.62.SP4 Versions not published
Red Hat Update Infrastructure 5 1777459504 earliest → < 1777459504 1777459504
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP 3.1 3.1.7 → latest No fix stated
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP 3.1 3.1.7 → latest No fix stated
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP 3.1 3.1.7 → latest No fix stated
JBoss Core Services for RHEL 8 Versions not published
JBoss Core Services on RHEL 7 Versions not published
Red Hat Enterprise Linux 10 Versions not published
Red Hat Enterprise Linux 10.0 Extended Update Support Versions not published
Red Hat Enterprise Linux 8 Versions not published
Red Hat Enterprise Linux 8.2 Advanced Update Support Versions not published
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support Versions not published
Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On Versions not published
Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support Versions not published
Red Hat Enterprise Linux 8.6 Telecommunications Update Service Versions not published
Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions Versions not published
Red Hat Enterprise Linux 8.8 Telecommunications Update Service Versions not published
Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions Versions not published
Red Hat Enterprise Linux 9 Versions not published
Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions Versions not published
Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions Versions not published
Red Hat Enterprise Linux 9.4 Extended Update Support Versions not published
Red Hat Enterprise Linux 9.6 Extended Update Support Versions not published
RHEL-8 based Middleware Containers 7.13 earliest → < 7.13.5-4.1777325708 7.13.5-4.1777325708

References

Timeline

  1. Published
  2. Last modified

Other CVEs of nghttp2

The 5 CVEs of nghttp2 →
CVE-2026-58055 nghttp2's nghttpx proxy through 1.69.0 forwards an HTTP/1.1 Upgrade request that also carries a Content-Length header… 5.4 Medium CVE-2024-28182 nghttp2 is an implementation of the Hypertext Transfer Protocol version 2 in C 5.3 Medium CVE-2020-11080 In nghttp2 before version 1.41.0, the overly large HTTP/2 SETTINGS frame payload causes denial of service 3.7 Low CVE-2016-1544 nghttp2 before 1.7.1 allows remote attackers to cause a denial of service (memory exhaustion) Not rated
Track this CVE