CVE-2018-17189
In Apache HTTP server versions 2.4.37 and prior, by sending request bodies in a slow loris way to plain resources, the h2 stream for that request unne...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
In Apache HTTP server versions 2.4.37 and prior, by sending request bodies in a slow loris way to plain resources, the h2 stream for that request unnecessarily occupied a server thread cleaning up that incoming data. This affects only HTTP/2 (mod_http2) connections.
État des correctifs par distribution
Paquets corrigés publiés par chaque distribution pour cette CVE
- Alpine Linux ALPINE-CVE-2018-17189 apache2 Corrigé dans: 2.4.38-r0
- Debian DEBIAN-CVE-2018-17189 apache2 Corrigé dans: 2.4.38-1
Références
- advisory securityfocus.com
- advisory access.redhat.com
- advisory access.redhat.com
- advisory access.redhat.com
- advisory access.redhat.com
- advisory httpd.apache.org
- advisory security.gentoo.org
- advisory security.netapp.com
- advisory support.hpe.com
- advisory usn.ubuntu.com
- advisory debian.org
- advisory oracle.com
- advisory oracle.com
- advisory oracle.com
- advisory tenable.com
- report seclists.org
- web lists.apache.org
- web lists.apache.org
- web lists.apache.org
- web lists.apache.org
- web lists.apache.org
- web lists.apache.org
- web lists.apache.org
- web lists.apache.org
- web lists.apache.org
- web lists.apache.org
- web lists.apache.org
- web lists.apache.org
- web lists.fedoraproject.org
- web lists.fedoraproject.org