Описание
When under stress, closing many connections, the HTTP/2 handling code in Apache httpd 2.4.26 would sometimes access memory after it has been freed, resulting in potentially erratic behaviour.
| Релиз | Статус | Примечание |
|---|---|---|
| devel | released | 2.4.27-2ubuntu2 |
| esm-infra-legacy/trusty | not-affected | HTTP/2 disabled |
| esm-infra/xenial | not-affected | HTTP/2 disabled |
| precise/esm | not-affected | HTTP/2 disabled |
| trusty | not-affected | HTTP/2 disabled |
| trusty/esm | not-affected | HTTP/2 disabled |
| upstream | released | 2.4.27 |
| vivid/ubuntu-core | DNE | |
| xenial | not-affected | HTTP/2 disabled |
| yakkety | not-affected | HTTP/2 disabled |
Показывать по
5 Medium
CVSS2
7.5 High
CVSS3
Связанные уязвимости
When under stress, closing many connections, the HTTP/2 handling code in Apache httpd 2.4.26 would sometimes access memory after it has been freed, resulting in potentially erratic behaviour.
When under stress, closing many connections, the HTTP/2 handling code in Apache httpd 2.4.26 would sometimes access memory after it has been freed, resulting in potentially erratic behaviour.
When under stress, closing many connections, the HTTP/2 handling code ...
When under stress, closing many connections, the HTTP/2 handling code in Apache httpd 2.4.26 would sometimes access memory after it has been freed, resulting in potentially erratic behaviour.
5 Medium
CVSS2
7.5 High
CVSS3