tocsin

Debian/apache2: high 7.5

In certain proxy configurations, a denial of service attack against Apache HTTP Server versions 2.4.26 through to 2.4.63 can be triggered by untrusted clients causing an assertion in mod_proxy_http2.

Action: Upgrade apache2 to 2.4.65-1~deb12u1 or later.

Affected

introducedfixedlast affected
02.4.65-1~deb12u1-

Fixed versions

2.4.65-1~deb12u1

Sources

published · modified · JSON