Summary
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2019-0196: A vulnerability was found in Apache HTTP Server 2.4.17 to 2.4.38. Using fuzzed network input, the http/2 request handling could be made to access freed memory in string comparison when determining the method of a request and thus process the request incorrectly. 1695030: CVE-2019-0196 httpd: mod_http2: read-after-free on a string compare
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2 | mod_http2 | 0:1.15.1-1.amzn2 |
| Amazon Linux · 2 | mod_http2-debuginfo | 0:1.15.1-1.amzn2 |
Vulnerabilities 1
-
Unscored —CVE-2019-0196 EPSS 19%
A vulnerability was found in Apache HTTP Server 2.4.17 to 2.4.38. Using fuzzed network input, the http/2 request handli…
References
-
web
https://alas.aws.amazon.com/cve/html/CVE-2019-0196.html