Apache HTTP Server versions 2.4.20 to 2.4.43 When trace/debug was enabled for the HTTP/2 module and on certain traffic edge patterns, logging statements were made on the wrong connection, causing concurrent use of memory pools. Configuring the LogLevel of mod_http2 above "info" will mitigate this vulnerability for unpatched servers.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-mod_http2alma-upgrade-mod_md | May 4, 2022 | Aug 7, 2020 | |
| Alpine Linux | alpine-linux-upgrade-apache2 | Aug 22, 2024 | Aug 7, 2020 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-httpdamazon-linux-ami-2-upgrade-httpd-debuginfoamazon-linux-ami-2-upgrade-httpd-develamazon-linux-ami-2-upgrade-httpd-filesystemamazon-linux-ami-2-upgrade-httpd-manualamazon-linux-ami-2-upgrade-httpd-toolsamazon-linux-ami-2-upgrade-mod_http2amazon-linux-ami-2-upgrade-mod_http2-debuginfoamazon-linux-ami-2-upgrade-mod_ldapamazon-linux-ami-2-upgrade-mod_mdamazon-linux-ami-2-upgrade-mod_proxy_htmlamazon-linux-ami-2-upgrade-mod_sessionamazon-linux-ami-2-upgrade-mod_ssl | Sep 18, 2020 | Aug 7, 2020 | |
| Amazon_linux | — | amazon-linux-upgrade-httpd24 | Sep 1, 2020 | Aug 7, 2020 |
| Apache Httpd | View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗ | apache-httpd-upgrade-latest | Aug 10, 2020 | Aug 7, 2020 |
| Centos_linux | — | centos-upgrade-httpdcentos-upgrade-httpd-debuginfocentos-upgrade-httpd-debugsourcecentos-upgrade-httpd-develcentos-upgrade-httpd-filesystemcentos-upgrade-httpd-manualcentos-upgrade-httpd-toolscentos-upgrade-httpd-tools-debuginfocentos-upgrade-mod_http2centos-upgrade-mod_http2-debuginfocentos-upgrade-mod_http2-debugsourcecentos-upgrade-mod_ldapcentos-upgrade-mod_ldap-debuginfocentos-upgrade-mod_mdcentos-upgrade-mod_md-debuginfocentos-upgrade-mod_md-debugsourcecentos-upgrade-mod_proxy_htmlcentos-upgrade-mod_proxy_html-debuginfocentos-upgrade-mod_sessioncentos-upgrade-mod_session-debuginfocentos-upgrade-mod_sslcentos-upgrade-mod_ssl-debuginfo | Jun 1, 2021 | Aug 7, 2020 |
| Check Point Gaia | check-point-gaia-upgrade | Feb 25, 2026 | Oct 27, 2021 | |
| Debian | debian-upgrade-apache2 | Sep 2, 2020 | Aug 7, 2020 | |
| Freebsd | freebsd-upgrade-package-apache24freebsd-upgrade-package-mod_http2 | Aug 9, 2020 | Aug 8, 2020 | |
| Gentoo Linux | gentoo-linux-upgrade-www-servers-apache | Aug 10, 2020 | Aug 7, 2020 | |
| Huawei Euleros 2_0_sp8 | huawei-euleros-2_0_sp8-upgrade-httpdhuawei-euleros-2_0_sp8-upgrade-httpd-develhuawei-euleros-2_0_sp8-upgrade-httpd-filesystemhuawei-euleros-2_0_sp8-upgrade-httpd-manualhuawei-euleros-2_0_sp8-upgrade-httpd-toolshuawei-euleros-2_0_sp8-upgrade-mod_sessionhuawei-euleros-2_0_sp8-upgrade-mod_ssl | Aug 31, 2020 | Aug 7, 2020 | |
| Ibm Http_server | — | ibm-http_server-apply-fix-pack-9_0_5_5 | Feb 16, 2021 | Aug 7, 2020 |
| Oracle Solaris | oracle-solaris-11-4-upgrade-legacy-web-server-apache-24-module-apache-wsgi-34-4-5-1-11-4-25-0-1-75-2oracle-solaris-11-4-upgrade-legacy-web-server-apache-24-module-apache-wsgi-35-4-5-1-11-4-25-0-1-75-2oracle-solaris-11-4-upgrade-web-server-apache-24-2-4-46-11-4-25-0-1-75-2oracle-solaris-11-4-upgrade-web-server-apache-24-module-apache-dbd-2-4-46-11-4-25-0-1-75-2oracle-solaris-11-4-upgrade-web-server-apache-24-module-apache-dtrace-0-3-1-11-4-25-0-1-75-2oracle-solaris-11-4-upgrade-web-server-apache-24-module-apache-fcgid-2-3-9-11-4-25-0-1-75-2oracle-solaris-11-4-upgrade-web-server-apache-24-module-apache-gss-2-4-46-11-4-25-0-1-75-2oracle-solaris-11-4-upgrade-web-server-apache-24-module-apache-jk-1-2-46-11-4-25-0-1-75-2oracle-solaris-11-4-upgrade-web-server-apache-24-module-apache-ldap-2-4-46-11-4-25-0-1-75-2oracle-solaris-11-4-upgrade-web-server-apache-24-module-apache-lua-2-4-46-11-4-25-0-1-75-2oracle-solaris-11-4-upgrade-web-server-apache-24-module-apache-mellon-0-16-0-11-4-25-0-1-75-2oracle-solaris-11-4-upgrade-web-server-apache-24-module-apache-perl-2-0-10-11-4-25-0-1-75-2oracle-solaris-11-4-upgrade-web-server-apache-24-module-apache-security-2-9-2-11-4-25-0-1-75-2oracle-solaris-11-4-upgrade-web-server-apache-24-module-apache-ssl-2-4-46-11-4-25-0-1-75-2oracle-solaris-11-4-upgrade-web-server-apache-24-module-apache-ssl-fips-140-2-4-46-11-4-25-0-1-75-2oracle-solaris-11-4-upgrade-web-server-apache-24-module-apache-wsgi-27-4-5-1-11-4-25-0-1-75-2oracle-solaris-11-4-upgrade-web-server-apache-24-module-apache-wsgi-37-4-5-1-11-4-25-0-1-75-2oracle-solaris-11-4-upgrade-web-server-apache-24-module-apache-wsgi-4-5-1-11-4-25-0-1-75-2 | Jan 19, 2021 | Aug 7, 2020 | |
| Oracle_linux | — | oracle-linux-upgrade-httpdoracle-linux-upgrade-httpd-develoracle-linux-upgrade-httpd-filesystemoracle-linux-upgrade-httpd-manualoracle-linux-upgrade-httpd-toolsoracle-linux-upgrade-mod-http2oracle-linux-upgrade-mod-ldaporacle-linux-upgrade-mod-mdoracle-linux-upgrade-mod-proxy-htmloracle-linux-upgrade-mod-sessionoracle-linux-upgrade-mod-ssl | May 26, 2021 | Aug 7, 2020 |
| Redhat_linux | redhat-upgrade-httpdredhat-upgrade-httpd-debuginforedhat-upgrade-httpd-debugsourceredhat-upgrade-httpd-develredhat-upgrade-httpd-filesystemredhat-upgrade-httpd-manualredhat-upgrade-httpd-toolsredhat-upgrade-httpd-tools-debuginforedhat-upgrade-mod_http2redhat-upgrade-mod_http2-debuginforedhat-upgrade-mod_http2-debugsourceredhat-upgrade-mod_ldapredhat-upgrade-mod_ldap-debuginforedhat-upgrade-mod_mdredhat-upgrade-mod_md-debuginforedhat-upgrade-mod_md-debugsourceredhat-upgrade-mod_proxy_htmlredhat-upgrade-mod_proxy_html-debuginforedhat-upgrade-mod_sessionredhat-upgrade-mod_session-debuginforedhat-upgrade-mod_sslredhat-upgrade-mod_ssl-debuginfo | May 21, 2021 | Aug 7, 2020 | |
| Rocky_linux | rocky-upgrade-httpdrocky-upgrade-httpd-debuginforocky-upgrade-httpd-debugsourcerocky-upgrade-httpd-develrocky-upgrade-httpd-toolsrocky-upgrade-httpd-tools-debuginforocky-upgrade-mod_http2rocky-upgrade-mod_http2-debuginforocky-upgrade-mod_http2-debugsourcerocky-upgrade-mod_ldaprocky-upgrade-mod_ldap-debuginforocky-upgrade-mod_mdrocky-upgrade-mod_md-debuginforocky-upgrade-mod_md-debugsourcerocky-upgrade-mod_proxy_htmlrocky-upgrade-mod_proxy_html-debuginforocky-upgrade-mod_sessionrocky-upgrade-mod_session-debuginforocky-upgrade-mod_sslrocky-upgrade-mod_ssl-debuginfo | Mar 12, 2024 | Aug 7, 2020 | |
| Suse | — | suse-upgrade-apache2suse-upgrade-apache2-develsuse-upgrade-apache2-docsuse-upgrade-apache2-eventsuse-upgrade-apache2-example-pagessuse-upgrade-apache2-preforksuse-upgrade-apache2-utilssuse-upgrade-apache2-worker | Aug 27, 2020 | Aug 7, 2020 |
| Ubuntu | ubuntu-upgrade-apache2ubuntu-upgrade-apache2-binubuntu-upgrade-libapache2-mod-proxy-uwsgi | Aug 14, 2020 | Aug 7, 2020 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | Aug 7, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub