[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

248392

 
 

909

 
 

195452

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

ALAS2-2019-1197 --- mod_http2

ID: oval:org.secpod.oval:def:1700159Date: (C)2019-05-30   (M)2024-01-29
Class: PATCHFamily: unix




In Apache HTTP server versions 2.4.37 and prior, by sending request bodies in a slow loris way to plain resources, the h2 stream for that request unnecessarily occupied a server thread cleaning up that incoming data. This affects only HTTP/2 connections.

Platform:
Amazon Linux 2
Product:
mod_http2
Reference:
ALAS2-2019-1197
CVE-2018-17189
CVE    1
CVE-2018-17189
CPE    2
cpe:/a:apache:mod_http2
cpe:/o:amazon:linux:2

© SecPod Technologies