CVE-2020-11993
Apache HTTP Server versions 2.4.20 to 2.4.43 When trace/debug was enabled for the HTTP/2 module and on certain traffic edge patterns, logging statemen...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Apache HTTP Server versions 2.4.20 to 2.4.43 When trace/debug was enabled for the HTTP/2 module and on certain traffic edge patterns, logging statements were made on the wrong connection, causing concurrent use of memory pools. Configuring the LogLevel of mod_http2 above "info" will mitigate this vulnerability for unpatched servers.
Paquets affectés
Bitnami
apache
[{"type":"SEMVER","events":[{"introduced":"2.4.20"},{"fixed":"2.4.44"}]}]
État des correctifs par distribution
Paquets corrigés publiés par chaque distribution pour cette CVE
- Alpine Linux ALPINE-CVE-2020-11993 apache2 Corrigé dans: 2.4.46-r0
- Debian DEBIAN-CVE-2020-11993 apache2 Corrigé dans: 2.4.46-1
Références
- advisory lists.opensuse.org
- advisory lists.opensuse.org
- advisory lists.opensuse.org
- advisory packetstormsecurity.com
- advisory httpd.apache.org
- advisory lists.fedoraproject.org
- advisory lists.fedoraproject.org
- advisory security.gentoo.org
- advisory security.netapp.com
- advisory usn.ubuntu.com
- advisory debian.org
- advisory oracle.com
- advisory oracle.com
- patch lists.apache.org
- patch lists.apache.org
- patch lists.apache.org
- patch lists.apache.org
- patch lists.apache.org
- patch lists.apache.org
- patch lists.apache.org
- patch lists.apache.org
- patch lists.apache.org
- patch lists.apache.org
- patch lists.apache.org
- patch lists.apache.org
- patch lists.apache.org
- web nvd.nist.gov