Поиск уязвимостей
Количество 34
Количество 34
BDU:2023-07124
Уязвимость модуля mod_macro веб-сервера Apache HTTP Server, позволяющая нарушителю вызвать отказ в обслуживании
SUSE-SU-2024:3999-1
Security update for apache2
SUSE-SU-2024:3962-1
Security update for apache2
SUSE-SU-2024:3961-1
Security update for apache2
SUSE-SU-2024:3949-1
Security update for apache2
GHSA-m4mp-v249-x3mh
When a HTTP/2 stream was reset (RST frame) by a client, there was a time window were the request's memory resources were not reclaimed immediately. Instead, de-allocation was deferred to connection close. A client could send new requests and resets, keeping the connection busy and open and causing the memory footprint to keep on growing. On connection close, all resources were reclaimed, but the process might run out of memory before that. This was found by the reporter during testing of CVE-2023-44487 (HTTP/2 Rapid Reset Exploit) with their own test client. During "normal" HTTP/2 use, the probability to hit this bug is very low. The kept memory would not become noticeable before the connection closes or times out. Users are recommended to upgrade to version 2.4.58, which fixes the issue.
BDU:2023-07003
Уязвимость компонента обработчика HTTP2 веб-сервера Apache HTTP Server, позволяющая нарушителю вызвать отказ в обслуживании
ROS-20251125-02
Уязвимость apache-mina
ROS-20231030-01
Уязвимость Apache httpd
ROS-20240806-10
Уязвимость mod_http2
ELSA-2024-2368
ELSA-2024-2368: mod_http2 security update (MODERATE)
ALT-PU-2023-6511
ALT-PU-2023-6511: package `apache2-mod_http2` update to version 2.0.25-alt1
ALT-PU-2023-6508
ALT-PU-2023-6508: package `apache2-mod_http2` update to version 2.0.25-alt1
SUSE-SU-2026:2686-1
Security update for apache2
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | BDU:2023-07124 Уязвимость модуля mod_macro веб-сервера Apache HTTP Server, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 7.5 | 3% Низкий | около 3 лет назад |
 | SUSE-SU-2024:3999-1 Security update for apache2 | 3% Низкий | почти 2 года назад | |
| SUSE-SU-2024:3962-1 Security update for apache2 | 3% Низкий | почти 2 года назад | |
| SUSE-SU-2024:3961-1 Security update for apache2 | 3% Низкий | почти 2 года назад | |
| SUSE-SU-2024:3949-1 Security update for apache2 | 3% Низкий | около 2 лет назад | |
| GHSA-m4mp-v249-x3mh When a HTTP/2 stream was reset (RST frame) by a client, there was a time window were the request's memory resources were not reclaimed immediately. Instead, de-allocation was deferred to connection close. A client could send new requests and resets, keeping the connection busy and open and causing the memory footprint to keep on growing. On connection close, all resources were reclaimed, but the process might run out of memory before that. This was found by the reporter during testing of CVE-2023-44487 (HTTP/2 Rapid Reset Exploit) with their own test client. During "normal" HTTP/2 use, the probability to hit this bug is very low. The kept memory would not become noticeable before the connection closes or times out. Users are recommended to upgrade to version 2.4.58, which fixes the issue. | CVSS3: 5.9 | 3% Низкий | около 3 лет назад |
| BDU:2023-07003 Уязвимость компонента обработчика HTTP2 веб-сервера Apache HTTP Server, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 7.5 | 3% Низкий | около 3 лет назад |
 | ROS-20251125-02 Уязвимость apache-mina | CVSS3: 6.5 | 3% Низкий | 12 месяцев назад |
| ROS-20231030-01 Уязвимость Apache httpd | CVSS3: 9.1 | 3% Низкий | около 3 лет назад |
| ROS-20240806-10 Уязвимость mod_http2 | CVSS3: 7.5 | 3% Низкий | больше 2 лет назад |
| ELSA-2024-2368 ELSA-2024-2368: mod_http2 security update (MODERATE) | больше 2 лет назад | ||
| ALT-PU-2023-6511 ALT-PU-2023-6511: package `apache2-mod_http2` update to version 2.0.25-alt1 | CVSS3: 7.5 | 3% Низкий | около 3 лет назад |
| ALT-PU-2023-6508 ALT-PU-2023-6508: package `apache2-mod_http2` update to version 2.0.25-alt1 | CVSS3: 7.5 | 3% Низкий | около 3 лет назад |
| SUSE-SU-2026:2686-1 Security update for apache2 | 4 месяца назад |
Уязвимостей на страницу