{"id":1109,"date":"2024-04-10T21:53:45","date_gmt":"2024-04-10T19:53:45","guid":{"rendered":"https:\/\/techlance.ddns.net\/?p=1109"},"modified":"2024-04-10T21:54:36","modified_gmt":"2024-04-10T19:54:36","slug":"palvelunestohyokkays-node-js-http-2-palvelimessa","status":"publish","type":"post","link":"https:\/\/techlance.ddns.net\/en\/palvelunestohyokkays-node-js-http-2-palvelimessa\/","title":{"rendered":"Palvelunestohy\u00f6kk\u00e4ys Node.js HTTP\/2 -palvelimessa"},"content":{"rendered":"<p>Luokitus: Vakava, Ratkaisu: Virallinen korjaus, Hy\u00f6dynt\u00e4misen kypsyys: Todistamaton, CVSSv3.1: 8.2, CVEt: CVE-2024-27983, Yhteenveto: Hy\u00f6kk\u00e4\u00e4j\u00e4 voi tehd\u00e4 Node.js HTTP\/2 -palvelimen t\u00e4ysin saavuttamattomaksi l\u00e4hett\u00e4m\u00e4ll\u00e4 pienen m\u00e4\u00e4r\u00e4n HTTP\/2-kehyspaketteja, joissa on muutama HTTP\/2-kehys sis\u00e4ll\u00e4. On mahdollista j\u00e4tt\u00e4\u00e4 joitakin tietoja nghttp2-muistiin nollauksen j\u00e4lkeen, kun palvelimelle l\u00e4hetet\u00e4\u00e4n otsikoita HTTP\/2 CONTINUATION -kehyksen kanssa ja sitten TCP-yhteys suljetaan \u00e4killisesti asiakkaan toimesta, mik\u00e4 laukaisee Http2Session-destruktorin, kun otsikokehyksi\u00e4 k\u00e4sitell\u00e4\u00e4n edelleen (ja varastoidaan muistiin) aiheuttaen kilpailutilanteen.<\/p>\n\n\n\n<p>Classification: Severe, Solution: Official Fix, Exploit Maturity: Unproven, CVSSv3.1: 8.2, CVEs: CVE-2024-27983, Summary: An attacker can make the Node.js HTTP\/2 server completely unavailable by sending a small amount of HTTP\/2 frames packets with a few HTTP\/2 frames inside. It is possible to leave some data in nghttp2 memory after reset when headers with HTTP\/2 CONTINUATION frame are sent to the server and then a TCP connection is abruptly closed by the client triggering the Http2Session destructor while header frames are still being processed (and stored in memory) causing a race condition.<\/p>\n\n\n\n<p><a href=\"https:\/\/hackerone.com\/reports\/2319584\">https:\/\/hackerone.com\/reports\/2319584<\/a><\/p>","protected":false},"excerpt":{"rendered":"<p>Luokitus: Vakava, Ratkaisu: Virallinen korjaus, Hy\u00f6dynt\u00e4misen kypsyys: Todistamaton, CVSSv3.1: 8.2, CVEt: CVE-2024-27983, Yhteenveto: Hy\u00f6kk\u00e4\u00e4j\u00e4 voi tehd\u00e4 Node.js HTTP\/2 -palvelimen t\u00e4ysin [&hellip;]<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"site-sidebar-layout":"default","site-content-layout":"","ast-site-content-layout":"default","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","ast-disable-related-posts":"","theme-transparent-header-meta":"","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"default","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"footnotes":""},"categories":[9],"tags":[15],"class_list":["post-1109","post","type-post","status-publish","format-standard","hentry","category-security","tag-tietoturva"],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/techlance.ddns.net\/en\/wp-json\/wp\/v2\/posts\/1109","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/techlance.ddns.net\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/techlance.ddns.net\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/techlance.ddns.net\/en\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/techlance.ddns.net\/en\/wp-json\/wp\/v2\/comments?post=1109"}],"version-history":[{"count":0,"href":"https:\/\/techlance.ddns.net\/en\/wp-json\/wp\/v2\/posts\/1109\/revisions"}],"wp:attachment":[{"href":"https:\/\/techlance.ddns.net\/en\/wp-json\/wp\/v2\/media?parent=1109"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/techlance.ddns.net\/en\/wp-json\/wp\/v2\/categories?post=1109"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/techlance.ddns.net\/en\/wp-json\/wp\/v2\/tags?post=1109"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}