{"action":"Upgrade apache2 to 2.4.35-r0 or later.","affected":[{"fixed":"2.4.35-r0","introduced":"0"}],"component":"apache2","cve_ids":[],"ecosystem":"Alpine","ecosystem_qualifier":"Alpine:v3.11","exploited":false,"fixed_versions":["2.4.35-r0"],"id":"tcs_01M5NA4HAJFDWEKTHGYX0VM8CF","modified_at":"2026-10-23T17:17:55.205430065Z","published_at":"2018-09-25T21:29:00.283Z","references":["https://osv.dev/vulnerability/ALPINE-CVE-2018-11763","https://security.alpinelinux.org/vuln/CVE-2018-11763"],"severity":{"label":"medium","score":5.9},"sources":[{"source":"osv","source_id":"ALPINE-CVE-2018-11763#Alpine:v3.11/apache2","url":"https://osv.dev/vulnerability/ALPINE-CVE-2018-11763"}],"summary":"In Apache HTTP Server 2.4.17 to 2.4.34, by sending continuous, large SETTINGS frames a client can occupy a connection, server thread and CPU time without any connection timeout coming to effect. This"}