mod_http2 vulnerabilities (TuxCare)
18 vulnerabilities.
-
mod_http2TuxCare Apache HTTP Server: mod_http2 memory corruption when file handles exhausted 7.3 High -
mod_http2TuxCare Apache HTTP Server: OOB Read in `merge_response_headers` can cause crash 6.5 Medium -
mod_http2TuxCare Apache HTTP Server: mod_http2 denial of service 7.5 High -
mod_http2TuxCare Apache HTTP Server: http2: double free and possible RCE on early reset 8.8 High -
mod_http2TuxCare Apache HTTP Server: HTTP/2 DoS by Memory Increase 7.5 High -
mod_http2TuxCare Apache HTTP Server: mod_proxy_http2 denial of service 7.5 High -
mod_http2TuxCare Apache HTTP Server: HTTP/2 stream memory not reclaimed right away on RST 5.9 Medium -
mod_http2TuxCare mod_proxy X-Forwarded-For dropped by hop-by-hop mechanism 9.8 Critical -
mod_http2TuxCare Information Disclosure in mod_lua with websockets 7.5 High -
mod_http2TuxCare mod_sed denial of service 7.5 High -
mod_http2TuxCare Read beyond bounds in ap_strcmp_match() 9.1 Critical -
mod_http2TuxCare mod_proxy_ajp: Possible request smuggling 7.5 High -
mod_http2TuxCare Possible buffer overflow when parsing multipart content in mod_lua of Apache HTTP Server 2.4.51 and earlier 9.8 Critical -
mod_http2TuxCare mod_proxy SSRF 9.0 Critical -
mod_http2TuxCare Request splitting via HTTP/2 method injection and mod_proxy 7.5 High -
mod_http2TuxCare Unexpected URL matching with 'MergeSlashes OFF' 5.3 Medium -
mod_http2TuxCare mod_session NULL pointer dereference 7.5 High -
mod_http2TuxCare mod_auth_digest possible stack overflow by one nul byte 7.3 High