Red Hat Security Advisory

RHSA-2019:2950

Red Hat JBoss Core Services Apache HTTP Server 2.4.29 SP3 security update

Released 2019-10-01 · Red Hat rating Important · View on Red Hat →

Fixed in

TI-2019-06951 CVE-2019-9516 · GHSA-6gw7-c226-vg73

MEDIUM 62

Some HTTP/2 implementations are vulnerable to a header leak, potentially leading to a denial of service.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.57461 Published 2019-08-13 Partial fix CWE-400

TI-2019-06952 CVE-2019-9517 · GHSA-w6v5-q8c8-52xx

MEDIUM 55

Some HTTP/2 implementations are vulnerable to unconstrained interal data buffering, potentially leading to a denial of service.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.27004 Published 2019-08-13 Partial fix CWE-400