PT-2017-19188

CVE-2017-9789

·

Published

2017-07-11

·

Updated

2021-06-06

Description by

CVSS 3.1
7.5
High
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Apache httpd version 2.4.26
Description The HTTP/2 handling code in Apache httpd sometimes accesses memory after it has been freed when under stress and closing many connections, resulting in potentially erratic behaviour.
Recommendations For Apache httpd version 2.4.26, consider updating to a newer version to mitigate the risk of erratic behaviour due to memory access issues. As a temporary workaround, consider restricting the number of concurrent connections to minimize the risk of exploitation.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
Related identifiers
ALT-PU-2017-1930
MGASA-2017-0298
SUSE-SU-2018:0261-1
Found an issue in the description? Have something to add? Feel free to write us 👾