Project

General

Profile

Actions
Copy link

Security #8788

closed
OT PA

http2: header detection bypass due to wrong padding handling (8.0.x backport)

Security #8788: http2: header detection bypass due to wrong padding handling (8.0.x backport)

Added by OISF Ticketbot 3 months ago. Updated about 1 month ago.

Status:
Closed
Priority:
Normal
Assignee:
Philippe Antoine
Target version:
8.0.7
Affected Versions:
Label:
CVE:
Git IDs:

6a44949f96f161a2c95d435eeacfdcacc162c18d

Severity:
MODERATE
Disclosure Date:
10/28/2026
GHSA:
GHSA-jhrj-vwj3-c6xv

JI Updated by Jason Ish 2 months ago Actions
Copy link
 #1

  • GHSA set to GHSA-jhrj-vwj3-c6xv

JI Updated by Jason Ish 2 months ago Actions
Copy link
 #2

  • Severity set to HIGH

Apply severity from parent ticket: HIGH.

PA Updated by Philippe Antoine 2 months ago Actions
Copy link
 #3

  • Assignee changed from OISF Dev to Victor Julien

SB Updated by Shivani Bhardwaj 2 months ago Actions
Copy link
 #4

  • Subject changed from http2: improper handling of header padding leads detection bypass (8.0.x backport) to http2: header detection bypass due to wrong padding handling (8.0.x backport)

PA Updated by Philippe Antoine about 2 months ago Actions
Copy link
 #5

  • Assignee changed from Victor Julien to Philippe Antoine

JI Updated by Jason Ish about 2 months ago Actions
Copy link
 #6

  • Severity changed from HIGH to MODERATE

Apply severity from parent ticket: MODERATE.

JI Updated by Jason Ish about 2 months ago Actions
Copy link
 #7

  • Disclosure Date set to 10/28/2026

JI Updated by Jason Ish about 2 months ago Actions
Copy link
 #8

  • Status changed from Assigned to Resolved

Staged.

JI Updated by Jason Ish about 2 months ago Actions
Copy link
 #9

  • Git IDs updated (diff)

JI Updated by Jason Ish about 1 month ago Actions
Copy link
 #10

  • Status changed from Resolved to Closed

JI Updated by Jason Ish about 1 month ago Actions
Copy link
 #11

  • Private changed from Yes to No
Actions
Copy link

Also available in: PDF Atom