ALPINE-CVE-2017-9789
ALPINE-CVE-2017-9789
This page contains facts from public vulnerability sources. Check the original advisory before updating.
When under stress, closing many connections, the HTTP/2 handling code in Apache httpd 2.4.26 would sometimes access memory after it has been freed, resulting in potentially erratic behaviour.
CVSS 7.5 · High · Fix available
- Published
- Updated
Stack: system
Affected products and versions
apache2 Alpine:v3.3
- Affected ranges
- ECOSYSTEM: < 2.4.27-r0
Update to 2.4.27-r0
apache2 Alpine:v3.4
- Affected ranges
- ECOSYSTEM: < 2.4.27-r0
Update to 2.4.27-r0
apache2 Alpine:v3.5
- Affected ranges
- ECOSYSTEM: < 2.4.27-r0
Update to 2.4.27-r0
apache2 Alpine:v3.6
- Affected ranges
- ECOSYSTEM: < 2.4.27-r0
Update to 2.4.27-r0