The host is installed with Apple Mac OS X or Server 10.11.x before 10.11.4 and is prone to an arbitrary code execution vulnerability. A flaw is present in the application, which fails to properly handle nghttp2 versions prior to 1.6.0. Successful exploitation could allow remote attackers to terminate application, execute arbitrary code.