5 matches found
CVE-2026-49975
CVE-2026-49975 Bomba HTTP/2 ★ CVE-2026-49975 PoC de la Bomba HTTP/2 ★ Resumen CVE-2026-49975 es una vulnerabilidad de Denegación de Servicio DoS en Apache HTTP Server. La vulnerabilidad ocurre en la ruta de manejo de solicitudes HTTP/2, donde múltiples campos de cabecera cookie pueden fusionarse...
CVE-2026-49975
CVE-2026-49975 Bomba HTTP/2 ★ CVE-2026-49975 PoC de Bomba HTTP/2 ★ https://github.com/user-attachments/assets/89310771-f704-45d1-a6c3-d910de1dbc74 Resumen CVE-2026-49975 es una vulnerabilidad de Denegación de Servicio DoS en Apache HTTP Server. La vulnerabilidad ocurre en la ruta de manejo de...
httpd: Incomplete handling of LimitRequestFields directive in mod_http2
A vulnerability was found in httpd's handling of the LimitRequestFields directive in modhttp2, affecting servers with HTTP/2 enabled. An attacker could send crafted requests with headers larger than the server's available memory, causing httpd to crash...
Apache HTTP Server 2.4.x < 2.4.25 Multiple Vulnerabilities
Binary data 9908.prm...
Apache Httpd < 2.4.25 : HTTP/2 CONTINUATION denial of service
The HTTP/2 protocol implementation modhttp2 had an incomplete handling of the LimitRequestFields directive. This allowed an attacker to inject unlimited request headers into the server, leading to eventual memory exhaustion...