CERT24Apache HTTP Server patches a critical HTTP/2 remote code execution flawLoading data…
CERT24Threat Observatory
Period

Apache HTTP Server patches a critical HTTP/2 remote code execution flaw

A critical vulnerability in the HTTP/2 module of Apache HTTP Server could allow an unauthenticated attacker to achieve remote code execution. The Apache Software Foundation has fixed the issue. Apache HTTP Server versions 2.4.55 through 2.4.70 and standalone mod_h2 versions 2.0.8 through 2.0.42 are vulnerable.

← Back to intelligence

Apache HTTP Server patches a critical HTTP/2 remote code execution flaw

A critical vulnerability in the HTTP/2 module of Apache HTTP Server could allow an unauthenticated attacker to achieve remote code execution. The Apache Software Foundation has fixed the issue. Apache HTTP Server versions 2.4.55 through 2.4.70 and standalone mod_h2 versions 2.0.8 through 2.0.42 are vulnerable.