CVE-2018-1333
published 2018-06-18CVE-2018-1333: By specially crafting HTTP/2 requests, workers would be allocated 60 seconds longer than necessary, leading to worker exhaustion and a denial of service. Fixed…
high7.5CVSS 3.0
AVNACLPRNUINSUCNINAH
By specially crafting HTTP/2 requests, workers would be allocated 60 seconds longer than necessary, leading to worker exhaustion and a denial of service. Fixed in Apache HTTP Server 2.4.34 (Affected 2.4.18-2.4.30,2.4.33).
Affected
14 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| apache | http_server | — | — |
| apache | http_server | 2.4.18 – 2.4.30 | — |
| apache_software_foundation | apache_http_server | — | — |
| canonical | ubuntu_linux | — | — |
| debian | apache2 | < apache2 2.4.34-1 (bookworm) | apache2 2.4.34-1 (bookworm) |
| highcharts | highcharts | >= 0 < 6.1.0 | 6.1.0 |
| marked_project | marked | >= 0 < 0.3.17 | 0.3.17 |
| mel-spintax_project | mel-spintax | >= 0 < 1.0.3 | 1.0.3 |
| protobufjs_project | protobufjs | >= 0 < 5.0.3 | 5.0.3 |
| protobufjs_project | protobufjs | >= 6.0.0 < 6.8.6 | 6.8.6 |
| redhat | jboss_core_services | — | — |
| rgb2hex_project | rgb2hex | >= 0 < 0.1.6 | 0.1.6 |
| segmentio | is-url | >= 0 < 1.2.3 | 1.2.3 |
| skeemas_project | skeemas | >= 0 < 1.2.5 | 1.2.5 |
CVSS provenance
nvdv3.07.5HIGHCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
osv7.5HIGH