Lucene search

K
rockyRockylinux Product ErrataRLSA-2024:2564
HistoryMay 10, 2024 - 2:32 p.m.

mod_http2 security update

2024-05-1014:32:42
Rockylinux Product Errata
errata.rockylinux.org
6
mod_http2
security update
rocky linux 9
cvss score
http2 protocol
dos
cve page

7.2 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

10.1%

An update is available for mod_http2.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list
The mod_h2 Apache httpd module implements the HTTP2 protocol (h2+h2c) on top of libnghttp2 for httpd 2.4 servers.

Security Fix(es):

  • mod_http2: httpd: CONTINUATION frames DoS (CVE-2024-27316)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.