Vulnerabilities in h2o
10 resultsCVE-2021-43848HIGHUnititialized memory access in h2oEPSS 2.7%CVE-2023-30847HIGHH2O vulnerable to read from uninitialized pointer in the reverse proxy handlerEPSS 0.9%CVE-2023-50247LOWh2o QUIC state exhaustion DoSEPSS 0.9%CVE-2024-45403LOWH2O assertion failure when HTTP/3 requests are cancelledEPSS 0.6%CVE-2024-45396HIGHQuicly assertion failuresEPSS 0.6%CVE-2024-45402HIGHPicotls double freeEPSS 0.5%CVE-2024-45397MEDIUMH2O alllows bypassing address-based access control with 0-RTTEPSS 0.4%CVE-2024-25622LOWH2O ignores headers configuration directivesEPSS 0.4%CVE-2025-61684HIGHQuicly has assertion failuresEPSS 0.3%CVE-2023-41337MEDIUMh2o vulnerable to TLS session resumption misdirectionEPSS 0.2%