Description
In Apache HTTP server versions 2.4.37 and prior, by sending request bodies in a slow loris way to plain resources, the h2 stream for that request unnecessarily occupied a server thread cleaning up that incoming data. This affects only HTTP/2 (mod_http2) connections.
Remediation
References
Related Vulnerabilities
Liferay Portal CVE-2020-13444 Vulnerability (CVE-2020-13444)
Oracle Database Server CVE-2009-1995 Vulnerability (CVE-2009-1995)
WordPress Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-5487)
WordPress Plugin MyThemeShop Theme/Plugin Updater Cross-Site Scripting (1.2.3)
Atlassian Jira Improper Authentication Vulnerability (CVE-2022-0540)