CVE ID:	CVE-2024-27316
Description:	HTTP/2 incoming headers exceeding the limit are temporarily buffered in nghttp2 in order to generate an informative HTTP 413 response. If a client does not stop sending headers, this leads to memory exhaustion.
Test IDs:	1.3.6.1.4.1.25623.1.1.2.2024.1840   1.3.6.1.4.1.25623.1.1.2.2024.1915   1.3.6.1.4.1.25623.1.0.886777   1.3.6.1.4.1.25623.1.1.2.2024.2042   1.3.6.1.4.1.25623.1.1.2.2024.2244   1.3.6.1.4.1.25623.1.0.886622   1.3.6.1.4.1.25623.1.1.2.2024.2331   1.3.6.1.4.1.25623.1.1.2.2024.2123   1.3.6.1.4.1.25623.1.1.2.2024.2480   1.3.6.1.4.1.25623.1.1.2.2024.2220   1.3.6.1.4.1.25623.1.1.2.2024.1819   1.3.6.1.4.1.25623.1.1.2.2024.2311   1.3.6.1.4.1.25623.1.1.2.2024.2143   1.3.6.1.4.1.25623.1.1.2.2024.2170   1.3.6.1.4.1.25623.1.0.886857   1.3.6.1.4.1.25623.1.1.2.2024.1891   1.3.6.1.4.1.25623.1.1.2.2024.2196
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2024-27316 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FO73U3SLBYFGIW2YKXOK7RI4D6DJSZ2B/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QKKDVFWBKIHCC3WXNH3W75WWY4NW42OB/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MIUBKSCJGPJ6M2U63V6BKFDF725ODLG7/ https://httpd.apache.org/security/vulnerabilities_24.html https://httpd.apache.org/security/vulnerabilities_24.html https://lists.debian.org/debian-lts-announce/2024/05/msg00013.html http://www.openwall.com/lists/oss-security/2024/04/03/16 http://www.openwall.com/lists/oss-security/2024/04/04/4