Apache mod_http2 and mod_auth_digest Multiple Vulnerabilities

Last Update Date: 14 Jul 2017 09:37 Release Date: 14 Jul 2017 3231 Views

RISK: Medium Risk

TYPE: Servers - Web Servers

Multiple vulnerabilities have been identified in Apache mod_http2 and mod_auth_digest, which can be exploited by remote attackers to cause denial of service condition and bypass security restrictions on target system.

Impact

Denial of Service
Information Disclosure

System / Technologies affected

2.2.33, 2.4.26

Solutions

Before installation of the software, please visit the software manufacturer web-site for more details.

The vendor has issued a fix (2.2.34, 2.4.27).

Vulnerability Identifier

CVE-2017-9789
CVE-2017-9788

Source

SecurityTracker