Red Hat Security Advisory

RHSA-2024:1786

httpd:2.4/mod_http2 security update

Released 2024-04-11 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 8) httpd-2.4.37-62.module+el8.9.0+19699+7a7a2044.aarch64::httpd:2.4, httpd-2.4.37-62.module+el8.9.0+19699+7a7a2044.ppc64le::httpd:2.4, httpd-2.4.37-62.module+el8.9.0+19699+7a7a2044.s390x::httpd:2.4 +38

TI-2024-18154 CVE-2024-27316 · GHSA-5qc4-82jh-h385

HIGH 81

HTTP/2 incoming headers exceeding the limit are temporarily buffered in nghttp2 in order to generate an informative HTTP 413 response.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.88755 Published 2024-04-04 Partial fix CWE-770