Apache HTTP Server versions 2.4.20 to 2.4.43. A specially crafted value for the 'Cache-Digest' header in a HTTP/2 request would result in a crash when the server actually tries to HTTP/2 PUSH a resource afterwards. Configuring the HTTP/2 feature via "H2Push off" will mitigate this vulnerability for unpatched servers.
AI analysis not yet available
Plain-English explanation, risk summary, and remediation steps will appear here once AI analysis is complete.
No Fix Known
No patch has been released yet. Apply workarounds or mitigations where available.
| Vendor | Product | Versions | Fixed In |
|---|---|---|---|
| apache | http_server | 2.4.20 - 2.4.46 | - |
| oracle | communications_element_manager | 8.2.0 - 8.2.2 | - |
| oracle | communications_session_report_manager |
Published
CVE disclosed publicly
Last Modified
Most recent update
Indexed to CVEInsight
Added to this platform
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
50
Affected Products
58
References
apache / http_server
| 8.2.0 - 8.2.2 |
| - |
| oracle | communications_session_route_manager | 8.2.0 - 8.2.2 | - |
| oracle | enterprise_manager_ops_center | - | - |
| oracle | hyperion_infrastructure_technology | - | - |
| oracle | instantis_enterprisetrack | - | - |
| oracle | instantis_enterprisetrack | - | - |
| oracle | instantis_enterprisetrack | - | - |
| oracle | zfs_storage_appliance_kit | - | - |
| opensuse | leap | - | - |
| opensuse | leap | - | - |
| debian | debian_linux | - | - |
| fedoraproject | fedora | - | - |
| fedoraproject | fedora | - | - |
| canonical | ubuntu_linux | - | - |
| canonical | ubuntu_linux | - | - |
| canonical | ubuntu_linux | - | - |
| redhat | software_collections | - | - |
| redhat | openstack | - | - |
| redhat | openstack_for_ibm_power | - | - |
| redhat | enterprise_linux | - | - |
| redhat | enterprise_linux_eus | - | - |
| redhat | enterprise_linux_eus | - | - |
| redhat | enterprise_linux_eus | - | - |
| redhat | enterprise_linux_eus | - | - |
| redhat | enterprise_linux_for_ibm_z_systems | - | - |
| redhat | enterprise_linux_for_ibm_z_systems_eus | - | - |
| redhat | enterprise_linux_for_ibm_z_systems_eus | - | - |
| redhat | enterprise_linux_for_ibm_z_systems_eus | - | - |
| redhat | enterprise_linux_for_ibm_z_systems_eus | - | - |
| redhat | enterprise_linux_for_power_little_endian | - | - |
| redhat | enterprise_linux_for_power_little_endian_eus | - | - |
| redhat | enterprise_linux_for_power_little_endian_eus | - | - |
| redhat | enterprise_linux_for_power_little_endian_eus | - | - |
| redhat | enterprise_linux_for_power_little_endian_eus | - | - |
| redhat | enterprise_linux_server_aus | - | - |
| redhat | enterprise_linux_server_aus | - | - |
| redhat | enterprise_linux_server_aus | - | - |
| redhat | enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions | - | - |
| redhat | enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions | - | - |
| redhat | enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions | - | - |
| redhat | enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions | - | - |
| redhat | enterprise_linux_server_tus | - | - |
| redhat | enterprise_linux_server_tus | - | - |
| redhat | enterprise_linux_server_tus | - | - |
| redhat | enterprise_linux_server_update_services_for_sap_solutions | - | - |
| redhat | enterprise_linux_server_update_services_for_sap_solutions | - | - |
| redhat | enterprise_linux_server_update_services_for_sap_solutions | - | - |
| redhat | enterprise_linux_server_update_services_for_sap_solutions | - | - |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Exploitability
Impact