Summary
httpd
mod_http2
[1.15.7-8.5]
- Resolves: RHEL-29816 - httpd:2.4/mod_http2: httpd: CONTINUATION frames
DoS (CVE-2024-27316)
mod_md
Fixed packages 11
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | httpd | 0:2.4.37-62.0.1.module+el8.9.0+90011+2f9c6a23 |
| Oracle Linux · 8 | httpd-devel | 0:2.4.37-62.0.1.module+el8.9.0+90011+2f9c6a23 |
| Oracle Linux · 8 | httpd-filesystem | 0:2.4.37-62.0.1.module+el8.9.0+90011+2f9c6a23 |
| Oracle Linux · 8 | httpd-manual | 0:2.4.37-62.0.1.module+el8.9.0+90011+2f9c6a23 |
| Oracle Linux · 8 | httpd-tools | 0:2.4.37-62.0.1.module+el8.9.0+90011+2f9c6a23 |
| Oracle Linux · 8 | mod_http2 | 0:1.15.7-8.module+el8.9.0+90299+1db10a42.5 |
| Oracle Linux · 8 | mod_ldap | 0:2.4.37-62.0.1.module+el8.9.0+90011+2f9c6a23 |
| Oracle Linux · 8 | mod_md | 1:2.0.8-8.module+el8.9.0+90011+2f9c6a23 |
| Oracle Linux · 8 | mod_proxy_html | 1:2.4.37-62.0.1.module+el8.9.0+90011+2f9c6a23 |
| Oracle Linux · 8 | mod_session | 0:2.4.37-62.0.1.module+el8.9.0+90011+2f9c6a23 |
| Oracle Linux · 8 | mod_ssl | 1:2.4.37-62.0.1.module+el8.9.0+90011+2f9c6a23 |
Vulnerabilities 1
-
High 7.5
Apache HTTP Server: HTTP/2 DoS by memory exhaustion on endless continuation frames
HTTP/2 incoming headers exceeding the limit are temporarily buffered in nghttp2 in order to generate an informative HTTP 413 response. If a client does not stop sending headers, this leads to memory exhaustion.