Lucene search

K
fedoraFedoraFEDORA:6C25E203D4A1
HistoryApr 21, 2024 - 1:08 a.m.

[SECURITY] Fedora 40 Update: mod_http2-2.0.27-1.fc40

2024-04-2101:08:56
lists.fedoraproject.org
15
fedora 40
mod_http2
apache httpd
http2 protocol
libnghttp2
unix
server

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

7

Confidence

Low

EPSS

0.001

Percentile

47.6%

The mod_h2 Apache httpd module implements the HTTP2 protocol (h2+h2c) on top of libnghttp2 for httpd 2.4 servers.

OSVersionArchitecturePackageVersionFilename
Fedora40anymod_http2< 2.0.27UNKNOWN

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

7

Confidence

Low

EPSS

0.001

Percentile

47.6%