Skip to content
Appaloosa Scout

Vulnerability · NVD

CVE-2018-16843

HIGH 7.5

nginx before versions 1.15.6 and 1.14.1 has a vulnerability in the implementation of HTTP/2 that can allow for excessive memory consumption. This issue affects nginx compiled with the ngx_http_v2_module (not compiled by default) if the 'http2' option of the 'listen' directive is used in a configuration file.

Attack vector : Network No privileges required No user interaction
Show raw CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS 47.06% moderate exploit risk percentile 98.7%

Tracked apps referencing this CVE

For each app: the affected range, the fixing version, and where the tracked app stands today.

  • Xcode macOS com.apple.dt.Xcode
    Affected <13.0 Fixed in 13.0 Latest tracked 26.6 patched

NVD references 5 distinct products for this CVE — only those tracked by Scout (mobile and desktop catalog apps) are listed above. Libraries, servers and out-of-scope products do not appear here. Full list on NVD ↗

Vulnerable CPE configurations (1)
Vendor Product Versions
apple xcode
All platforms (wildcard)
 <13.0
View on NVD ↗ Advisory · mailman.nginx.org