Red Hat Security Advisory

RHSA-2024:2564

mod_http2 security update

Released 2024-04-30 · Red Hat rating Moderate · View on Red Hat →

Fixed in

TI-2024-18154 CVE-2024-27316 · GHSA-5qc4-82jh-h385

HIGH 81

HTTP/2 incoming headers exceeding the limit are temporarily buffered in nghttp2 in order to generate an informative HTTP 413 response.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.88755 Published 2024-04-04 Partial fix CWE-770