Description

A maliciously constructed HTTP/2 request could cause mod_http2 in Apache HTTP Server 2.4.24, 2.4.25 to dereference a NULL pointer and crash the server process.

Remediation

References

CVE-2017-7659

Related Vulnerabilities

MySQL CVE-2021-2164 Vulnerability (CVE-2021-2164)

MediaWiki Improper Input Validation Vulnerability (CVE-2011-0003)

WordPress Plugin Floating Chat Widget:Contact Chat Icons, Telegram Chat, Line, WeChat, Email, SMS, Call Button-Chaty SQL Injection (3.0.2)

WordPress Plugin WP Favorite Posts Cross-Site Scripting (1.6.5)

Moodle Improper Authentication Vulnerability (CVE-2013-2245)

Severity

High

Classification

CVE-2017-7659 CWE-476 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L

Tags

Missing Update Known Vulnerabilities