CVE-2023-45802 Apache HTTP Server: HTTP/2 stream memory not reclaimed right away on RST

🗓️ 23 Oct 2023 06:50:23Reported by apacheType

Apache HTTP Server: HTTP/2 stream memory not reclaimed after client rese

Reporter	Title	Published	Views	Family All 191
GithubExploit	Exploit for Improper Resource Shutdown or Release in Apache Http_Server	19 Apr 202619:34	–	githubexploit
IBM Security Bulletins	Security Bulletin: Vulnerability in Apache HTTP Server (CVE-2023-45802) affects Power HMC.	14 Dec 202412:03	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM contains multiple vulnerabilities	11 Mar 202519:26	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilites in IBM Rational Build Forge.	2 Apr 202413:12	–	ibm
IBM Security Bulletins	Security Bulletin: IBM HTTP Server (powered by Apache) for IBM i is vulnerable to an attacker uploading arbitrary files and obtaining sensitive information (CVE-2023-45802, CVE-2023-31122)	16 Feb 202421:57	–	ibm
ATTACKERKB	CVE-2023-44487	10 Oct 202300:00	–	attackerkb
Tenable Nessus	Amazon Linux 2023 : httpd, httpd-core, httpd-devel (ALAS2023-2023-433)	15 Nov 202300:00	–	nessus
Tenable Nessus	Amazon Linux 2 : httpd (ALAS-2023-2322)	2 Nov 202300:00	–	nessus
Tenable Nessus	Amazon Linux AMI : httpd24 (ALAS-2023-1877)	3 Nov 202300:00	–	nessus
Tenable Nessus	Alibaba Cloud Linux 3 : 0116: httpd:2.4 (ALINUX3-SA-2024:0116)	14 May 202500:00	–	nessus

[
  {
    "defaultStatus": "unaffected",
    "product": "Apache HTTP Server",
    "vendor": "Apache Software Foundation",
    "versions": [
      {
        "lessThanOrEqual": "2.4.57",
        "status": "affected",
        "version": "2.4.17",
        "versionType": "semver"
      }
    ]
  }
]

Source	Link
httpd	www.httpd.apache.org/security/vulnerabilities_24.html

14 Oct 2024 09:01Current

7.1High risk

Vulners AI Score7.1

EPSS0.02793

CWE-404