FedoraFEDORA:3A5D820301E3

HistoryNov 07, 2023 - 2:32 a.m.

Vulners
/
Fedora
/
[SECURITY] Fedora 37 Update: mod_http2-2.0.25-1.fc37

[SECURITY] Fedora 37 Update: mod_http2-2.0.25-1.fc37

2023-11-0702:32:37

lists.fedoraproject.org

fedora

update

mod_h2

apache

httpd

http2

libnghttp2

servers

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

7.3

Confidence

Low

EPSS

0.816

Percentile

98.4%

JSON

The mod_h2 Apache httpd module implements the HTTP2 protocol (h2+h2c) on top of libnghttp2 for httpd 2.4 servers.

OSVersionArchitecturePackageVersionFilename
Fedora37anymod_http2< 2.0.25UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Fedora	37	any	mod_http2	< 2.0.25	UNKNOWN

openvas 36

vulnrichment 1

nessus 49

osv 51

f5 1

alpinelinux 1

attackerkb 1

debiancve 1

cve 1

ubuntucve 1

prion 1

fedora 3

cvelist 1

redhatcve 1

nvd 1

redhat 21

almalinux 5

rocky 3

mageia 1

cbl_mariner 8

veracode 1

redos 1

ibm 3

oraclelinux 2

atlassian 1

github 1

amazon 1

githubexploit 1

openvas

Apache HTTP Server 2.4.17 - 2.4.57 DoS Vulnerability - Windows

2023-10-19 00:00:00

Fedora: Security Advisory for mod_http2 (FEDORA-2023-c0c6a91330)

2023-11-08 00:00:00

Fedora: Security Advisory (FEDORA-2023-492b7be466)

2023-11-07 00:00:00

vulnrichment

CVE-2023-45802 Apache HTTP Server: HTTP/2 stream memory not reclaimed right away on RST

2023-10-23 06:50:23

nessus

Fedora 39 : mod_http2 (2023-492b7be466)

2023-11-07 00:00:00

Fedora 37 : mod_http2 (2023-c0c6a91330)

2023-11-07 00:00:00

Fedora 38 : mod_http2 (2023-0259c3f26f)

2023-10-24 00:00:00

osv

BIT-2023-45802

2023-11-02 07:16:21

BIT-apache-2023-45802

2024-03-06 10:50:33

CVE-2023-45802

2023-10-23 07:15:11

K000137327 : Apache mod_http2 vulnerability CVE-2023-45802

2023-10-23 00:00:00

alpinelinux

CVE-2023-45802

2023-10-23 07:15:11

attackerkb

CVE-2023-44487

2023-10-10 00:00:00

debiancve

CVE-2023-45802

2023-10-23 07:15:11

cve

CVE-2023-45802

2023-10-23 07:15:11

ubuntucve

CVE-2023-45802

2023-10-23 00:00:00

prion

Design/Logic Flaw

2023-10-23 07:15:00

fedora

[SECURITY] Fedora 39 Update: mod_http2-2.0.25-1.fc39

2023-11-07 01:40:03

[SECURITY] Fedora 38 Update: mod_http2-2.0.25-1.fc38

2023-10-24 01:23:54

[SECURITY] Fedora 38 Update: fbthrift-2023.10.16.00-1.fc38

2023-10-24 01:23:49

cvelist

CVE-2023-45802 Apache HTTP Server: HTTP/2 stream memory not reclaimed right away on RST

2023-10-23 06:50:23

redhatcve

CVE-2023-45802

2023-10-19 19:44:57

nvd

CVE-2023-45802

2023-10-23 07:15:11

redhat

(RHSA-2024:3121) Moderate: httpd:2.4 security update

2024-05-22 06:35:40

(RHSA-2024:2368) Moderate: mod_http2 security update

2024-04-30 06:15:30

(RHSA-2024:2891) Moderate: httpd:2.4 security update

2024-05-16 11:37:17

almalinux

Moderate: httpd:2.4 security update

2024-05-22 00:00:00

Moderate: mod_http2 security update

2024-04-30 00:00:00

Important: nghttp2 security update

2023-10-18 00:00:00

rocky

httpd:2.4 security update

2024-06-14 13:59:30

nodejs security update

2023-10-24 18:36:46

varnish security update

2023-10-24 18:35:47

mageia

Updated apache packages fix security vulnerabilities

2023-10-28 00:49:40

cbl_mariner

CVE-2023-45802 affecting package httpd for versions less than 2.4.58-1

2023-11-08 02:07:28

CVE-2023-44487 affecting package moby-containerd-cc for versions less than 1.7.1-5

2024-02-09 19:07:07

CVE-2023-44487 affecting package etcd for versions less than 3.5.6-11

2024-03-22 16:14:52

veracode

Denial Of Service (DoS)

2023-10-20 07:48:32

redos

ROS-20240806-10

2024-08-06 00:00:00

ibm

Security Bulletin: IBM HTTP Server (powered by Apache) for IBM i is vulnerable to an attacker uploading arbitrary files and obtaining sensitive information (CVE-2023-45802, CVE-2023-31122)

2024-02-16 21:57:19

Security Bulletin: IBM WebSphere Application Server Liberty, which is bundled with IBM Cloud Pak for Applications, is vulnerable to denial of service due to HTTP/2 Rapid Reset vulnerability (CVE-2023-44487)

2023-11-15 20:45:34

Security Bulletin: IBM Storage Ceph is vulnerable to Uncontrolled Resource Consumption in Grafana (CVE-2023-44487)

2024-01-26 21:59:35

oraclelinux

httpd:2.4 security update

2024-05-24 00:00:00

.NET 7.0 security update

2023-10-18 00:00:00

atlassian

DoS (Denial of Service) io.netty:netty-codec-http2 in Confluence Data Center and Server

2023-11-03 00:45:12

github

HTTP/2 Stream Cancellation Attack

2023-10-10 21:28:24

amazon

Important: nghttp2

2023-10-16 13:45:00

githubexploit

Exploit for Uncontrolled Resource Consumption in Ietf Http

2023-12-11 23:12:03

Solutions

Vulnerabilities intelligence
Perimeter control tool
Linux scanner
Windows scanner
Developers SDK
Security Intelligence feeds

Database

Vulnerabilities
Exploits
Security News
BugBounty
Wild Exploited
Top Vulnerabilities
CVE Feed

Resources

Statics & Sources
Plugins
API docs
FAQ
Blog
Glossary

Company

About
Contacts
Pricing
EULA
Privacy Policy
Submission Policy
OpenSource

@2024 Vulners Inc

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

7.3

Confidence

Low

EPSS

0.816

Percentile

98.4%

JSON

Related for FEDORA:3A5D820301E3