CVE-2018-17189

Name of the Vulnerable Software and Affected Versions Apache HTTP Server versions 2.4.37 and prior

Description The issue is related to errors in resource management in the mod http2 module of the Apache HTTP Server, which can lead to uncontrolled resource consumption. An attacker can exploit this by sending specially crafted requests, potentially causing a denial of service. This affects only HTTP/2 (mod http2) connections. The estimated number of potentially affected devices is not specified.

Recommendations For Apache HTTP Server versions 2.4.37 and prior, consider disabling the h2 protocol as a temporary mitigation measure to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.