USN-3783-1

Dashboard / Vulnerabilities / USN-3783-1

USN-3783-1

Summary: apache2 vulnerabilities

Details: Robert Swiecki discovered that the Apache HTTP Server HTTP/2 module incorrectly destroyed certain streams. A remote attacker could possibly use this issue to cause the server to crash, leading to a denial of service. (CVE-2018-1302) Craig Young discovered that the Apache HTTP Server HTTP/2 module incorrectly handled certain requests. A remote attacker could possibly use this issue to cause the server to consume resources, leading to a denial of service. (CVE-2018-1333) Gal Goldshtein discovered that the Apache HTTP Server HTTP/2 module incorrectly handled large SETTINGS frames. A remote attacker could possibly use this issue to cause the server to consume resources, leading to a denial of service. (CVE-2018-11763)

References: https://ubuntu.com/security/notices/USN-3783-1, https://ubuntu.com/security/CVE-2018-1302, https://ubuntu.com/security/CVE-2018-1333, https://ubuntu.com/security/CVE-2018-11763