PatchTheCVEdena vulnerabilities
Recent CVEs affecting dena products. 7 tracked.
dena has 7 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 7. Most recent: 2024-10-11. Highest priority: CVE-2024-45402 (score 45/100).
- CVE-2024-45403 LOW 3.7 UPGRADE h2o is an HTTP server with support for HTTP/1.x, HTTP/2 and HTTP/3
- CVE-2024-45402 HIGH 8.6 UPGRADE Picotls is a TLS protocol library that allows users select different crypto backends based on their use case
- CVE-2024-45397 MEDIUM 5.9 UPGRADE h2o is an HTTP server with support for HTTP/1.x, HTTP/2 and HTTP/3
- CVE-2024-45396 HIGH 7.5 UPGRADE Quicly is an IETF QUIC protocol implementation
- CVE-2024-25622 LOW 3.1 UPGRADE h2o is an HTTP server with support for HTTP/1.x, HTTP/2 and HTTP/3
- CVE-2023-50247 LOW 3.7 UPGRADE h2o is an HTTP server with support for HTTP/1.x, HTTP/2 and HTTP/3
- CVE-2023-41337 MEDIUM 6.1 UPGRADE h2o is an HTTP server with support for HTTP/1.x, HTTP/2 and HTTP/3
FAQ
How do I fix dena vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is dena being exploited right now?
None of the tracked dena CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which dena CVE should I patch first?
CVE-2024-45402 currently ranks highest (45/100): Picotls is a TLS protocol library that allows users select different crypto backends based on their use case.