Red Hat Security AdvisoryRHSA-2024:2907
httpd:2.4 security update
Released 2024-05-20 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream EUS (v.8.6) httpd-2.4.37-47.module+el8.6.0+19809+6e655c60.7.aarch64::httpd:2.4, httpd-2.4.37-47.module+el8.6.0+19809+6e655c60.7.ppc64le::httpd:2.4, httpd-2.4.37-47.module+el8.6.0+19809+6e655c60.7.s390x::httpd:2.4 +38
Fixes 1 record
Priority HIGH 81
HTTP/2 incoming headers exceeding the limit are temporarily buffered in nghttp2 in order to generate an informative HTTP 413 response.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.88755 · Published 2024-04-04 · Partial fix CWE-770
