BSA-2018-711

🗓️ 02 Oct 2018 00:00:00Reported by Broadcom Security ResponseType

Apache HTTP Server 2.4.17/2.4.18 with mod_http2 can exhaust HTTP/2 stream workers, enabling remote DoS via flow control.

Reporter	Title	Published	Views	Family All 34
IBM Security Bulletins	Security Bulletin: IBM i Integrated Web Application Server version 8.5 is affected by multiple vulnerabilities.	18 Dec 201914:26	–	ibm
Tenable Nessus	Apache HTTP Server 2.4.x < 2.4.23 Multiple Vulnerabilities	15 Jul 201600:00	–	nessus
Tenable Nessus	Apache 2.4.17 / 2.4.18 DoS	8 Feb 201900:00	–	nessus
Tenable Nessus	GLSA-201610-02 : Apache: Multiple vulnerabilities	7 Oct 201600:00	–	nessus
Tenable Nessus	MiracleLinux 4 : httpd24-httpd-2.4.25-9.AXS4 (AXSA:2017-1637:01)	16 Jan 202600:00	–	nessus
Tenable Nessus	MiracleLinux 7 : httpd24-httpd-2.4.25-9.el7 (AXSA:2017-1638:01)	19 Jan 202600:00	–	nessus
Tenable Nessus	Photon OS 1.0: Cracklib / Glibc / Httpd / Libevent / Libgcrypt PHSA-2017-0013 (deprecated)	17 Aug 201800:00	–	nessus
Tenable Nessus	Photon OS 1.0: Httpd PHSA-2017-0013	7 Feb 201900:00	–	nessus
Tenable Nessus	Apache 2.4.17 / 2.4.18 mod_http2 Denial of Service	31 Jan 201900:00	–	nessus
CNVD	Apache HTTP Server Denial of Service Vulnerability (CNVD-2016-04612)	7 Jul 201600:00	–	cnvd

02 Oct 2018 22:06Current

8.1High risk

Vulners AI Score8.1

CVSS 24.3

CVSS 35.9

EPSS0.41505