Summary
mod_http2
[1.11.3-3.1]
- Resolves: #1869072 - CVE-2020-9490 httpd:2.4/mod_http2: httpd: Push diary
crash on specifically crafted HTTP/2 header
Fixed packages 11
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | httpd | 0:2.4.37-21.0.1.module+el8.2.0+5576+c083ffcb |
| Oracle Linux · 8 | httpd-devel | 0:2.4.37-21.0.1.module+el8.2.0+5576+c083ffcb |
| Oracle Linux · 8 | httpd-filesystem | 0:2.4.37-21.0.1.module+el8.2.0+5576+c083ffcb |
| Oracle Linux · 8 | httpd-manual | 0:2.4.37-21.0.1.module+el8.2.0+5576+c083ffcb |
| Oracle Linux · 8 | httpd-tools | 0:2.4.37-21.0.1.module+el8.2.0+5576+c083ffcb |
| Oracle Linux · 8 | mod_http2 | 0:1.11.3-3.module+el8.2.0+7789+dac765eb.1 |
| Oracle Linux · 8 | mod_ldap | 0:2.4.37-21.0.1.module+el8.2.0+5576+c083ffcb |
| Oracle Linux · 8 | mod_md | 1:2.0.8-7.module+el8.2.0+5576+c083ffcb |
| Oracle Linux · 8 | mod_proxy_html | 1:2.4.37-21.0.1.module+el8.2.0+5576+c083ffcb |
| Oracle Linux · 8 | mod_session | 0:2.4.37-21.0.1.module+el8.2.0+5576+c083ffcb |
| Oracle Linux · 8 | mod_ssl | 1:2.4.37-21.0.1.module+el8.2.0+5576+c083ffcb |
Vulnerabilities 1
-
Unscored —CVE-2020-9490 EPSS 89%
Apache HTTP Server versions 2.4.20 to 2.4.43. A specially crafted value for the 'Cache-Digest' header in a HTTP/2 reque…