Low: mod_http2 security update

🗓️ 30 Oct 2024 00:00:00Reported by AlmaLinuxType

almalinux🔗 errata.almalinux.org👁 7 Views

mod_http2 security update - DoS by null pointer in websocket over HTTP/

Reporter	Title	Published	Views	Family All 63
Tenable Nessus	CBL Mariner 2.0 Security Update: httpd (CVE-2024-36387)	20 Jul 202400:00	–	nessus
Tenable Nessus	Fedora 40 : mod_http2 (2024-cb8acbf644)	27 Jul 202400:00	–	nessus
Tenable Nessus	Amazon Linux 2023 : mod_http2 (ALAS2023-2024-689)	6 Aug 202400:00	–	nessus
Tenable Nessus	Fedora 39 : mod_http2 (2024-661bb6322d)	27 Jul 202400:00	–	nessus
Tenable Nessus	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : apache2 (SUSE-SU-2024:2597-1)	25 Jul 202400:00	–	nessus
Tenable Nessus	FreeBSD : Apache httpd -- Multiple vulnerabilities (d7efc2ad-37af-11ef-b611-84a93843eb75)	2 Jul 202400:00	–	nessus
Tenable Nessus	Slackware Linux 15.0 / current httpd Multiple Vulnerabilities (SSA:2024-184-01)	2 Jul 202400:00	–	nessus
Tenable Nessus	Apache 2.4.x < 2.4.60 Multiple Vulnerabilities	3 Jul 202400:00	–	nessus
Tenable Nessus	Ubuntu 20.04 LTS / 22.04 LTS / 23.10 / 24.04 LTS : Apache HTTP Server vulnerabilities (USN-6885-1)	8 Jul 202400:00	–	nessus
Tenable Nessus	Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS : Apache HTTP Server regression (USN-6885-2)	11 Jul 202400:00	–	nessus

Source	Link
access	www.access.redhat.com/errata/RHSA-2024:8680
access	www.access.redhat.com/security/cve/CVE-2024-36387
bugzilla	www.bugzilla.redhat.com/2295006
errata	www.errata.almalinux.org/9/ALSA-2024-8680.html

OS	OS Version	Architecture	Package	Package Version	Filename
almalinux	9	aarch64	mod_http2	2.0.26-2.el9_4.1	mod_http2-2.0.26-2.el9_4.1.aarch64.rpm
almalinux	9	ppc64le	mod_http2	2.0.26-2.el9_4.1	mod_http2-2.0.26-2.el9_4.1.ppc64le.rpm
almalinux	9	x86_64	mod_http2	2.0.26-2.el9_4.1	mod_http2-2.0.26-2.el9_4.1.x86_64.rpm
almalinux	9	s390x	mod_http2	2.0.26-2.el9_4.1	mod_http2-2.0.26-2.el9_4.1.s390x.rpm

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

30 Oct 2024 00:00Current

7.2High risk

Vulners AI Score7.2

CVSS35.4

SSVC