Lucene search
OracleLinuxELSA-2024-1872HistoryApr 18, 2024 - 12:00 a.m.
mod_http2 security update
2024-04-1800:00:00
linux.oracle.com
18
mod_http2
security update
continuation frames
dos
cve-2024-27316
rhel-29826
httpd
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
AI Score
7
Confidence
Low
EPSS
0.001
Percentile
47.6%
[1.15.19-5.1]
- Resolves: RHEL-29826 - mod_http2: httpd: CONTINUATION frames
DoS (CVE-2024-27316)
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| oracle linux | 9 | src | mod_http2 | < 1.15.19-5.el9_3.1 | mod_http2-1.15.19-5.el9_3.1.src.rpm |
| oracle linux | 9 | aarch64 | mod_http2 | < 1.15.19-5.el9_3.1 | mod_http2-1.15.19-5.el9_3.1.aarch64.rpm |
| oracle linux | 9 | src | mod_http2 | < 1.15.19-5.el9_3.1 | mod_http2-1.15.19-5.el9_3.1.src.rpm |
| oracle linux | 9 | x86_64 | mod_http2 | < 1.15.19-5.el9_3.1 | mod_http2-1.15.19-5.el9_3.1.x86_64.rpm |
Related
openvas
openvas
Huawei EulerOS: Security Advisory for mod_http2 (EulerOS-SA-2024-2042)
2024-07-22 00:00:00
Huawei EulerOS: Security Advisory for mod_http2 (EulerOS-SA-2024-2331)
2024-09-03 00:00:00
Huawei EulerOS: Security Advisory for mod_http2 (EulerOS-SA-2024-1819)
2024-06-25 00:00:00
redos
redos
ROS-20240425-01
2024-04-25 00:00:00
nessus
nessus
EulerOS 2.0 SP11 : mod_http2 (EulerOS-SA-2024-1819)
2024-06-25 00:00:00
Photon OS 4.0: Httpd PHSA-2024-4.0-0591
2024-07-23 00:00:00
EulerOS 2.0 SP8 : mod_http2 (EulerOS-SA-2024-2480)
2024-09-24 00:00:00
osv
osv
CVE-2024-27316
2024-04-04 20:15:08
Important: httpd:2.4/mod_http2 security update
2024-05-06 13:04:21
BIT-apache-2024-27316
2024-04-06 18:17:01
ibm
ibm
vulnrichment
vulnrichment
nvd
nvd
CVE-2024-27316
2024-04-04 20:15:08
debiancve
debiancve
CVE-2024-27316
2024-04-04 20:15:08
rocky
rocky
httpd:2.4/mod_http2 security update
2024-05-06 13:04:21
mod_http2 security update
2024-05-10 14:32:42
veracode
veracode
Memory Exhaustion
2024-04-10 19:25:29
redhat
redhat
(RHSA-2024:1872) Important: mod_http2 security update
2024-04-18 00:58:11
(RHSA-2024:4390) Moderate: Red Hat JBoss Enterprise Application Platform 8.0 security update
2024-07-08 21:26:13
(RHSA-2024:2907) Moderate: httpd:2.4 security update
2024-05-20 01:02:25
almalinux
almalinux
Moderate: mod_http2 security update
2024-04-30 00:00:00
Important: mod_http2 security update
2024-04-18 00:00:00
Important: httpd:2.4/mod_http2 security update
2024-04-11 00:00:00
githubexploit
githubexploit
cbl_mariner
cbl_mariner
CVE-2024-27316 affecting package httpd for versions less than 2.4.61-1
2024-08-14 20:43:58
CVE-2024-27316 affecting package httpd for versions less than 2.4.59-1
2024-05-06 17:48:02
ubuntucve
ubuntucve
CVE-2024-27316
2024-03-27 00:00:00
hackerone
hackerone
amazon
amazon
Important: mod_http2
2024-04-24 22:15:00
Important: httpd24
2024-04-25 16:04:00
oraclelinux
oraclelinux
mod_http2 security update
2024-05-07 00:00:00
httpd:2.4/mod_http2 security update
2024-04-11 00:00:00
fedora
fedora
[SECURITY] Fedora 40 Update: mod_http2-2.0.27-1.fc40
2024-04-21 01:08:56
[SECURITY] Fedora 38 Update: mod_http2-2.0.27-1.fc38
2024-04-21 02:57:21
[SECURITY] Fedora 39 Update: mod_http2-2.0.27-1.fc39
2024-04-21 01:20:22
alpinelinux
alpinelinux
CVE-2024-27316
2024-04-04 20:15:08
redhatcve
redhatcve
CVE-2024-27316
2024-04-03 19:27:03
f5
f5
K000139214 : Apache httpd vulnerability CVE-2024-27316
2024-04-08 00:00:00
cvelist
cvelist
cve
cve
CVE-2024-27316
2024-04-04 20:15:08
photon
photon
Important Photon OS Security Update - PHSA-2024-3.0-0748
2024-04-11 00:00:00
Important Photon OS Security Update - PHSA-2024-5.0-0242
2024-04-10 00:00:00
Important Photon OS Security Update - PHSA-2024-4.0-0591
2024-04-11 00:00:00
ubuntu
ubuntu
Apache HTTP Server vulnerabilities
2024-04-17 00:00:00
Apache HTTP Server vulnerabilities
2024-04-11 00:00:00
Apache HTTP Server vulnerabilities
2024-04-29 00:00:00
slackware
slackware
[slackware-security] httpd
2024-04-04 19:16:44
kaspersky
kaspersky
KLA65470 Multiple vulnerabilities in Apache HTTP Server
2024-04-04 00:00:00
freebsd
freebsd
Apache httpd -- multiple vulnerabilities
2024-04-04 00:00:00
mageia
mageia
Updated apache packages fix security vulnerabilities
2024-04-10 07:03:52
debian
debian
[SECURITY] [DLA 3818-1] apache2 security update
2024-05-25 11:06:45
[SECURITY] [DSA 5662-1] apache2 security update
2024-04-16 18:32:07
arista
arista
Security Advisory 0094
2024-04-03 00:00:00
cert
cert
HTTP/2 CONTINUATION frames can be utilized for DoS attacks
2024-04-03 00:00:00
thn
thn
New HTTP/2 Vulnerability Exposes Web Servers to DoS Attacks
2024-04-04 11:15:00
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
AI Score
7
Confidence
Low
EPSS
0.001
Percentile
47.6%
Related for ELSA-2024-1872