FedoraFEDORA:3A5D820301E3

HistoryNov 07, 2023 - 2:32 a.m.

[SECURITY] Fedora 37 Update: mod_http2-2.0.25-1.fc37

Vulners
Fedora
[SECURITY] Fedora 37 Update: mod_http2-2.0.25-1.fc37

2023-11-0702:32:37

lists.fedoraproject.org

fedora

update

mod_h2

apache

httpd

http2

libnghttp2

servers

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.3 High

AI Score

Confidence

Low

0.732 High

EPSS

Percentile

98.1%

JSON

The mod_h2 Apache httpd module implements the HTTP2 protocol (h2+h2c) on top of libnghttp2 for httpd 2.4 servers.

OSVersionArchitecturePackageVersionFilename
Fedora37anymod_http2< 2.0.25UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Fedora	37	any	mod_http2	< 2.0.25	UNKNOWN

fedora 12

cvelist 1

nvd 1

redhatcve 1

alpinelinux 1

debiancve 1

ubuntucve 1

attackerkb 1

cve 1

nessus 52

osv 12

prion 1

openvas 39

f5 1

almalinux 7

redhat 23

rocky 5

mageia 1

cbl_mariner 20

veracode 2

oraclelinux 5

ibm 3

atlassian 1

debian 2

amazon 1

redos 1

github 1

githubexploit 1

cnvd 1

fedora

[SECURITY] Fedora 38 Update: mod_http2-2.0.25-1.fc38

2023-10-24 01:23:54

[SECURITY] Fedora 39 Update: mod_http2-2.0.25-1.fc39

2023-11-07 01:40:03

[SECURITY] Fedora 38 Update: fbthrift-2023.10.16.00-1.fc38

2023-10-24 01:23:49

cvelist

CVE-2023-45802 Apache HTTP Server: HTTP/2 stream memory not reclaimed right away on RST

2023-10-23 06:50:23

nvd

CVE-2023-45802

2023-10-23 07:15:11

redhatcve

CVE-2023-45802

2023-10-19 19:44:57

alpinelinux

CVE-2023-45802

2023-10-23 07:15:11

debiancve

CVE-2023-45802

2023-10-23 07:15:11

ubuntucve

CVE-2023-45802

2023-10-23 00:00:00

attackerkb

CVE-2023-44487

2023-10-10 00:00:00

cve

CVE-2023-45802

2023-10-23 07:15:11

nessus

Fedora 38 : mod_http2 (2023-0259c3f26f)

2023-10-24 00:00:00

RHEL 6 : mod_http2 (Unpatched Vulnerability)

2024-05-11 00:00:00

Fedora 39 : mod_http2 (2023-492b7be466)

2023-11-07 00:00:00

osv

CVE-2023-45802

2023-10-23 07:15:11

BIT-2023-45802

2023-11-02 07:16:21

BIT-apache-2023-45802

2024-03-06 10:50:33

prion

Design/Logic Flaw

2023-10-23 07:15:00

openvas

Apache HTTP Server 2.4.17 - 2.4.57 DoS Vulnerability - Linux

2023-10-19 00:00:00

Fedora: Security Advisory for mod_http2 (FEDORA-2023-0259c3f26f)

2023-10-25 00:00:00

Apache HTTP Server 2.4.17 - 2.4.57 DoS Vulnerability - Windows

2023-10-19 00:00:00

K000137327 : Apache mod_http2 vulnerability CVE-2023-45802

2023-10-23 00:00:00

almalinux

Moderate: mod_http2 security update

2024-04-30 00:00:00

Moderate: httpd:2.4 security update

2024-05-22 00:00:00

Important: dotnet6.0 security update

2023-10-16 00:00:00

redhat

(RHSA-2024:2368) Moderate: mod_http2 security update

2024-04-30 06:15:30

(RHSA-2024:2891) Moderate: httpd:2.4 security update

2024-05-16 11:37:17

(RHSA-2024:3121) Moderate: httpd:2.4 security update

2024-05-22 06:35:40

rocky

httpd:2.4 security update

2024-06-14 13:59:30

varnish security update

2023-10-24 18:36:42

varnish security update

2023-10-24 18:35:47

mageia

Updated apache packages fix security vulnerabilities

2023-10-28 00:49:40

cbl_mariner

CVE-2023-45802 affecting package httpd for versions less than 2.4.58-1

2023-11-08 02:07:28

CVE-2023-44487 affecting package docker-compose for versions less than 2.27.0-1

2024-05-17 21:38:35

CVE-2023-44487 affecting package moby-containerd-cc for versions less than 1.7.1-5

2024-02-09 19:07:07

veracode

Denial Of Service (DoS)

2023-10-20 07:48:32

Denial Of Service (DoS)

2023-10-12 14:37:40

oraclelinux

mod_http2 security update

2024-05-02 00:00:00

httpd:2.4 security update

2024-05-24 00:00:00

.NET 7.0 security update

2023-10-18 00:00:00

ibm

Security Bulletin: IBM HTTP Server (powered by Apache) for IBM i is vulnerable to an attacker uploading arbitrary files and obtaining sensitive information (CVE-2023-45802, CVE-2023-31122)

2024-02-16 22:00:10

Security Bulletin: IBM WebSphere Application Server Liberty, which is bundled with IBM Cloud Pak for Applications, is vulnerable to denial of service due to HTTP/2 Rapid Reset vulnerability (CVE-2023-44487)

2023-11-15 20:45:34

Security Bulletin: IBM Storage Ceph is vulnerable to Uncontrolled Resource Consumption in Grafana (CVE-2023-44487)

2024-01-26 22:15:52

atlassian

DoS (Denial of Service) io.netty:netty-codec-http2 in Confluence Data Center and Server

2023-11-03 00:45:12

debian

[SECURITY] [DLA 3638-1] h2o security update

2023-10-31 14:09:23

[SECURITY] [DLA 3617-2] tomcat9 regression update

2023-10-16 22:23:23

amazon

Important: nghttp2

2023-10-16 13:45:00

redos

ROS-20231107-01

2023-11-07 00:00:00

github

HTTP/2 Stream Cancellation Attack

2023-10-10 21:28:24

githubexploit

Exploit for Uncontrolled Resource Consumption in Ietf Http

2023-12-11 23:12:03

cnvd

F5 BIG-IP Denial of Service Vulnerability (CNVD-2023-75597)

2023-10-11 00:00:00

Solutions

Vulnerabilities intelligence
Perimeter control tool
Linux scanner
Windows scanner
Developers SDK
Security Intelligence feeds

Database

Vulnerabilities
Exploits
Security News
BugBounty
Wild Exploited
Top Vulnerabilities
CVE Feed

Resources

Statics & Sources
Plugins
API docs
FAQ
Blog
Glossary

Company

About
Contacts
Pricing
EULA
Privacy Policy
Submission Policy
OpenSource

@2024 Vulners Inc

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.3 High

AI Score

Confidence

Low

0.732 High

EPSS

Percentile

98.1%

JSON

Related for FEDORA:3A5D820301E3