Red Hat Security AdvisoryRHSA-2019:2893
httpd:2.4 security update
Released 2019-09-24 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 8) httpd-2.4.37-12.module+el8.0.0+4096+eb40e6da.aarch64::httpd:2.4, httpd-2.4.37-12.module+el8.0.0+4096+eb40e6da.ppc64le::httpd:2.4, httpd-2.4.37-12.module+el8.0.0+4096+eb40e6da.s390x::httpd:2.4 +37
Fixes 1 record
Priority MEDIUM 55
Some HTTP/2 implementations are vulnerable to unconstrained interal data buffering, potentially leading to a denial of service.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.27004 · Published 2019-08-13 · Partial fix CWE-400
