Lucene search
Alpine Linux Development TeamALPINE:CVE-2024-27316HistoryApr 04, 2024 - 8:15 p.m.
CVE-2024-27316
2024-04-0420:15:08
Alpine Linux Development Team
security.alpinelinux.org
49
cve-2024-27316
memory exhaustion
http/2
nghttp2
unix
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
AI Score
7.7
Confidence
High
EPSS
0.001
Percentile
47.6%
HTTP/2 incoming headers exceeding the limit are temporarily buffered in nghttp2 in order to generate an informative HTTP 413 response. If a client does not stop sending headers, this leads to memory exhaustion.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Alpine | edge-main | noarch | apache2 | < 2.4.59-r0 | UNKNOWN |
| Alpine | 3.16-main | noarch | apache2 | < 2.4.59-r0 | UNKNOWN |
| Alpine | 3.17-main | noarch | apache2 | < 2.4.59-r0 | UNKNOWN |
| Alpine | 3.18-main | noarch | apache2 | < 2.4.59-r0 | UNKNOWN |
| Alpine | 3.19-main | noarch | apache2 | < 2.4.59-r0 | UNKNOWN |
| Alpine | 3.20-main | noarch | apache2 | < 2.4.59-r0 | UNKNOWN |
Related
openvas
openvas
Huawei EulerOS: Security Advisory for mod_http2 (EulerOS-SA-2024-2042)
2024-07-22 00:00:00
Huawei EulerOS: Security Advisory for mod_http2 (EulerOS-SA-2024-2331)
2024-09-03 00:00:00
Huawei EulerOS: Security Advisory for mod_http2 (EulerOS-SA-2024-1819)
2024-06-25 00:00:00
redos
redos
ROS-20240425-01
2024-04-25 00:00:00
nessus
nessus
EulerOS 2.0 SP11 : mod_http2 (EulerOS-SA-2024-1819)
2024-06-25 00:00:00
Photon OS 4.0: Httpd PHSA-2024-4.0-0591
2024-07-23 00:00:00
EulerOS 2.0 SP12 : mod_http2 (EulerOS-SA-2024-2244)
2024-08-20 00:00:00
osv
osv
CVE-2024-27316
2024-04-04 20:15:08
Important: httpd:2.4/mod_http2 security update
2024-05-06 13:04:21
BIT-apache-2024-27316
2024-04-06 18:17:01
ibm
ibm
nvd
nvd
CVE-2024-27316
2024-04-04 20:15:08
vulnrichment
vulnrichment
debiancve
debiancve
CVE-2024-27316
2024-04-04 20:15:08
rocky
rocky
httpd:2.4/mod_http2 security update
2024-05-06 13:04:21
mod_http2 security update
2024-05-10 14:32:42
veracode
veracode
Memory Exhaustion
2024-04-10 19:25:29
redhat
redhat
(RHSA-2024:1872) Important: mod_http2 security update
2024-04-18 00:58:11
(RHSA-2024:4390) Moderate: Red Hat JBoss Enterprise Application Platform 8.0 security update
2024-07-08 21:26:13
(RHSA-2024:2907) Moderate: httpd:2.4 security update
2024-05-20 01:02:25
almalinux
almalinux
Moderate: mod_http2 security update
2024-04-30 00:00:00
Important: mod_http2 security update
2024-04-18 00:00:00
Important: httpd:2.4/mod_http2 security update
2024-04-11 00:00:00
githubexploit
githubexploit
cbl_mariner
cbl_mariner
CVE-2024-27316 affecting package httpd for versions less than 2.4.61-1
2024-08-14 20:43:58
CVE-2024-27316 affecting package httpd for versions less than 2.4.59-1
2024-05-06 17:48:02
oraclelinux
oraclelinux
mod_http2 security update
2024-04-18 00:00:00
mod_http2 security update
2024-05-07 00:00:00
httpd:2.4/mod_http2 security update
2024-04-11 00:00:00
ubuntucve
ubuntucve
CVE-2024-27316
2024-03-27 00:00:00
hackerone
hackerone
amazon
amazon
Important: mod_http2
2024-04-24 22:15:00
Important: httpd24
2024-04-25 16:04:00
fedora
fedora
[SECURITY] Fedora 40 Update: mod_http2-2.0.27-1.fc40
2024-04-21 01:08:56
[SECURITY] Fedora 39 Update: mod_http2-2.0.27-1.fc39
2024-04-21 01:20:22
[SECURITY] Fedora 38 Update: mod_http2-2.0.27-1.fc38
2024-04-21 02:57:21
redhatcve
redhatcve
CVE-2024-27316
2024-04-03 19:27:03
cvelist
cvelist
f5
f5
K000139214 : Apache httpd vulnerability CVE-2024-27316
2024-04-08 00:00:00
cve
cve
CVE-2024-27316
2024-04-04 20:15:08
photon
photon
Important Photon OS Security Update - PHSA-2024-3.0-0748
2024-04-11 00:00:00
Important Photon OS Security Update - PHSA-2024-5.0-0242
2024-04-10 00:00:00
Important Photon OS Security Update - PHSA-2024-4.0-0591
2024-04-11 00:00:00
slackware
slackware
[slackware-security] httpd
2024-04-04 19:16:44
ubuntu
ubuntu
Apache HTTP Server vulnerabilities
2024-04-17 00:00:00
Apache HTTP Server vulnerabilities
2024-04-11 00:00:00
Apache HTTP Server vulnerabilities
2024-04-29 00:00:00
kaspersky
kaspersky
KLA65470 Multiple vulnerabilities in Apache HTTP Server
2024-04-04 00:00:00
freebsd
freebsd
Apache httpd -- multiple vulnerabilities
2024-04-04 00:00:00
mageia
mageia
Updated apache packages fix security vulnerabilities
2024-04-10 07:03:52
debian
debian
[SECURITY] [DLA 3818-1] apache2 security update
2024-05-25 11:06:45
[SECURITY] [DSA 5662-1] apache2 security update
2024-04-16 18:32:07
arista
arista
Security Advisory 0094
2024-04-03 00:00:00
cert
cert
HTTP/2 CONTINUATION frames can be utilized for DoS attacks
2024-04-03 00:00:00
thn
thn
New HTTP/2 Vulnerability Exposes Web Servers to DoS Attacks
2024-04-04 11:15:00
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
AI Score
7.7
Confidence
High
EPSS
0.001
Percentile
47.6%
Related for ALPINE:CVE-2024-27316