Apache HTTP Server versions 2.4.20 to 2.4.43. A specially crafted value for the 'Cache-Digest' header in a HTTP/2 request would result in a crash when the server actually tries to HTTP/2 PUSH a resource afterwards. Configuring the HTTP/2 feature via "H2Push off" will mitigate this vulnerability for unpatched servers.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | alpine-linux-upgrade-apache2 | Aug 22, 2024 | Aug 7, 2020 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-httpdamazon-linux-ami-2-upgrade-httpd-debuginfoamazon-linux-ami-2-upgrade-httpd-develamazon-linux-ami-2-upgrade-httpd-filesystemamazon-linux-ami-2-upgrade-httpd-manualamazon-linux-ami-2-upgrade-httpd-toolsamazon-linux-ami-2-upgrade-mod_http2amazon-linux-ami-2-upgrade-mod_http2-debuginfoamazon-linux-ami-2-upgrade-mod_ldapamazon-linux-ami-2-upgrade-mod_mdamazon-linux-ami-2-upgrade-mod_proxy_htmlamazon-linux-ami-2-upgrade-mod_sessionamazon-linux-ami-2-upgrade-mod_ssl | Sep 18, 2020 | Aug 7, 2020 | |
| Amazon_linux | — | amazon-linux-upgrade-httpd24 | Sep 1, 2020 | Aug 7, 2020 |
| Apache Httpd | View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗ | apache-httpd-upgrade-latest | Aug 10, 2020 | Aug 7, 2020 |
| Centos_linux | — | centos-upgrade-httpdcentos-upgrade-httpd-debuginfocentos-upgrade-httpd-debugsourcecentos-upgrade-httpd-develcentos-upgrade-httpd-filesystemcentos-upgrade-httpd-manualcentos-upgrade-httpd-toolscentos-upgrade-httpd-tools-debuginfocentos-upgrade-mod_http2centos-upgrade-mod_http2-debuginfocentos-upgrade-mod_http2-debugsourcecentos-upgrade-mod_ldapcentos-upgrade-mod_ldap-debuginfocentos-upgrade-mod_mdcentos-upgrade-mod_md-debuginfocentos-upgrade-mod_md-debugsourcecentos-upgrade-mod_proxy_htmlcentos-upgrade-mod_proxy_html-debuginfocentos-upgrade-mod_sessioncentos-upgrade-mod_session-debuginfocentos-upgrade-mod_sslcentos-upgrade-mod_ssl-debuginfo | Sep 11, 2020 | Aug 7, 2020 |
| Check Point Gaia | check-point-gaia-upgrade | Feb 25, 2026 | Oct 27, 2021 | |
| Debian | debian-upgrade-apache2 | Sep 2, 2020 | Aug 7, 2020 | |
| Freebsd | freebsd-upgrade-package-apache24freebsd-upgrade-package-mod_http2 | Aug 9, 2020 | Aug 8, 2020 | |
| Gentoo Linux | gentoo-linux-upgrade-www-servers-apache | Aug 10, 2020 | Aug 7, 2020 | |
| Huawei Euleros 2_0_sp8 | huawei-euleros-2_0_sp8-upgrade-httpdhuawei-euleros-2_0_sp8-upgrade-httpd-develhuawei-euleros-2_0_sp8-upgrade-httpd-filesystemhuawei-euleros-2_0_sp8-upgrade-httpd-manualhuawei-euleros-2_0_sp8-upgrade-httpd-toolshuawei-euleros-2_0_sp8-upgrade-mod_sessionhuawei-euleros-2_0_sp8-upgrade-mod_ssl | Aug 31, 2020 | Aug 7, 2020 | |
| Huawei Euleros 2_0_sp9 | huawei-euleros-2_0_sp9-upgrade-httpdhuawei-euleros-2_0_sp9-upgrade-httpd-filesystemhuawei-euleros-2_0_sp9-upgrade-httpd-toolshuawei-euleros-2_0_sp9-upgrade-mod_ssl | Oct 13, 2020 | Aug 7, 2020 | |
| Ibm Http_server | — | ibm-http_server-apply-fix-pack-9_0_5_5 | Feb 16, 2021 | Aug 7, 2020 |
| Oracle Solaris | oracle-solaris-11-4-upgrade-legacy-web-server-apache-24-module-apache-wsgi-34-4-5-1-11-4-25-0-1-75-2oracle-solaris-11-4-upgrade-legacy-web-server-apache-24-module-apache-wsgi-35-4-5-1-11-4-25-0-1-75-2oracle-solaris-11-4-upgrade-web-server-apache-24-2-4-46-11-4-25-0-1-75-2oracle-solaris-11-4-upgrade-web-server-apache-24-module-apache-dbd-2-4-46-11-4-25-0-1-75-2oracle-solaris-11-4-upgrade-web-server-apache-24-module-apache-dtrace-0-3-1-11-4-25-0-1-75-2oracle-solaris-11-4-upgrade-web-server-apache-24-module-apache-fcgid-2-3-9-11-4-25-0-1-75-2oracle-solaris-11-4-upgrade-web-server-apache-24-module-apache-gss-2-4-46-11-4-25-0-1-75-2oracle-solaris-11-4-upgrade-web-server-apache-24-module-apache-jk-1-2-46-11-4-25-0-1-75-2oracle-solaris-11-4-upgrade-web-server-apache-24-module-apache-ldap-2-4-46-11-4-25-0-1-75-2oracle-solaris-11-4-upgrade-web-server-apache-24-module-apache-lua-2-4-46-11-4-25-0-1-75-2oracle-solaris-11-4-upgrade-web-server-apache-24-module-apache-mellon-0-16-0-11-4-25-0-1-75-2oracle-solaris-11-4-upgrade-web-server-apache-24-module-apache-perl-2-0-10-11-4-25-0-1-75-2oracle-solaris-11-4-upgrade-web-server-apache-24-module-apache-security-2-9-2-11-4-25-0-1-75-2oracle-solaris-11-4-upgrade-web-server-apache-24-module-apache-ssl-2-4-46-11-4-25-0-1-75-2oracle-solaris-11-4-upgrade-web-server-apache-24-module-apache-ssl-fips-140-2-4-46-11-4-25-0-1-75-2oracle-solaris-11-4-upgrade-web-server-apache-24-module-apache-wsgi-27-4-5-1-11-4-25-0-1-75-2oracle-solaris-11-4-upgrade-web-server-apache-24-module-apache-wsgi-37-4-5-1-11-4-25-0-1-75-2oracle-solaris-11-4-upgrade-web-server-apache-24-module-apache-wsgi-4-5-1-11-4-25-0-1-75-2 | Jan 19, 2021 | Aug 7, 2020 | |
| Oracle_linux | — | oracle-linux-upgrade-httpdoracle-linux-upgrade-httpd-develoracle-linux-upgrade-httpd-filesystemoracle-linux-upgrade-httpd-manualoracle-linux-upgrade-httpd-toolsoracle-linux-upgrade-mod-http2oracle-linux-upgrade-mod-ldaporacle-linux-upgrade-mod-mdoracle-linux-upgrade-mod-proxy-htmloracle-linux-upgrade-mod-sessionoracle-linux-upgrade-mod-ssl | Sep 12, 2020 | Aug 7, 2020 |
| Redhat_linux | redhat-upgrade-httpdredhat-upgrade-httpd-debuginforedhat-upgrade-httpd-debugsourceredhat-upgrade-httpd-develredhat-upgrade-httpd-filesystemredhat-upgrade-httpd-manualredhat-upgrade-httpd-toolsredhat-upgrade-httpd-tools-debuginforedhat-upgrade-mod_http2redhat-upgrade-mod_http2-debuginforedhat-upgrade-mod_http2-debugsourceredhat-upgrade-mod_ldapredhat-upgrade-mod_ldap-debuginforedhat-upgrade-mod_mdredhat-upgrade-mod_md-debuginforedhat-upgrade-mod_md-debugsourceredhat-upgrade-mod_proxy_htmlredhat-upgrade-mod_proxy_html-debuginforedhat-upgrade-mod_sessionredhat-upgrade-mod_session-debuginforedhat-upgrade-mod_sslredhat-upgrade-mod_ssl-debuginfo | Sep 11, 2020 | Aug 7, 2020 | |
| Suse | — | suse-upgrade-apache2suse-upgrade-apache2-develsuse-upgrade-apache2-docsuse-upgrade-apache2-eventsuse-upgrade-apache2-example-pagessuse-upgrade-apache2-preforksuse-upgrade-apache2-utilssuse-upgrade-apache2-worker | Aug 27, 2020 | Aug 7, 2020 |
| Ubuntu | ubuntu-upgrade-apache2ubuntu-upgrade-apache2-binubuntu-upgrade-libapache2-mod-proxy-uwsgi | Aug 14, 2020 | Aug 7, 2020 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | Aug 7, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub