Description

A maliciously constructed HTTP/2 request could cause mod_http2 in Apache HTTP Server 2.4.24, 2.4.25 to dereference a NULL pointer and crash the server process.

Remediation

References

CVE-2017-7659

Related Vulnerabilities

WordPress Plugin User Role Editor Cross-Site Scripting (4.37)

WordPress Plugin Events Made Easy PHP Object Injection (2.0.52)

Oracle JRE CVE-2014-2402 Vulnerability (CVE-2014-2402)

WordPress Plugin Stockdio Historical Chart Cross-Site Scripting (2.7.2)

WordPress Plugin BetterOptin Cross-Site Scripting (1.2.4)

Severity

High

Classification

CVE-2017-7659 CWE-476 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Tags

Missing Update Known Vulnerabilities