CyberRota Analysis
This is a high severity vulnerability with a CVSS score of 7.5. It affects Nginx. Its EPSS score suggests a 47.1% probability of exploitation in the next 30 days.
CVE
CVE-2018-16843
Severity
HIGH
CVSS
7.5
EPSS
47.06%
Nginx
Original NVD Description
nginx before versions 1.15.6 and 1.14.1 has a vulnerability in the implementation of HTTP/2 that can allow for excessive memory consumption. This issue affects nginx compiled with the ngx_http_v2_module (not compiled by default) if the 'http2' option of the 'listen' directive is used in a configuration file.
Related CVEs
Other vulnerabilities affecting the same vendor(s)