AZL-43531 CVE-2023-45802 affecting package mod_http2 1.15.14-2

🗓️ 23 Oct 2023 07:15:11Reported by GoogleType

osv🔗 osv.dev👁 1 Views

Memory not reclaimed after HTTP/2 stream reset, causing growth until close; upgrade to 2.4.58.

Reporter	Title	Published	Views	Family All 189
GithubExploit	Exploit for Improper Resource Shutdown or Release in Apache Http_Server	19 Apr 202619:34	–	githubexploit
IBM Security Bulletins	Security Bulletin: Vulnerability in Apache HTTP Server (CVE-2023-45802) affects Power HMC.	14 Dec 202412:03	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM contains multiple vulnerabilities	11 Mar 202519:26	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilites in IBM Rational Build Forge.	2 Apr 202413:12	–	ibm
IBM Security Bulletins	Security Bulletin: IBM HTTP Server (powered by Apache) for IBM i is vulnerable to an attacker uploading arbitrary files and obtaining sensitive information (CVE-2023-45802, CVE-2023-31122)	16 Feb 202421:57	–	ibm
ATTACKERKB	CVE-2023-44487	10 Oct 202300:00	–	attackerkb
Tenable Nessus	Amazon Linux 2023 : httpd, httpd-core, httpd-devel (ALAS2023-2023-433)	15 Nov 202300:00	–	nessus
Tenable Nessus	Amazon Linux 2 : httpd (ALAS-2023-2322)	2 Nov 202300:00	–	nessus
Tenable Nessus	Amazon Linux AMI : httpd24 (ALAS-2023-1877)	3 Nov 202300:00	–	nessus
Tenable Nessus	Alibaba Cloud Linux 3 : 0116: httpd:2.4 (ALINUX3-SA-2024:0116)	14 May 202500:00	–	nessus