Description
In Apache HTTP server versions 2.4.37 and prior, by sending request bodies in a slow loris way to plain resources, the h2 stream for that request unnecessarily occupied a server thread cleaning up that incoming data. This affects only HTTP/2 (mod_http2) connections.
Remediation
References
Related Vulnerabilities
Dotclear Other Vulnerability (CVE-2007-1989)
WordPress Plugin Easy Testimonial Manager SQL Injection (1.2.0)
WordPress Plugin Newsletter-Send awesome emails from WordPress SQL Injection (3.0.8)
WordPress Plugin Cookie Notice & Compliance for GDPR/CCPA Cross-Site Scripting (2.1.1)
Oracle Database Server CVE-2006-3701 Vulnerability (CVE-2006-3701)