CVE-2023-31122 vulnerabilities and exploits

(subscribe to this query)

Out-of-bounds Read vulnerability in mod_macro of Apache HTTP Server.This issue affects Apache HTTP Server: up to and including 2.4.57.

Apache Software Foundation Apache Http Server Apache Http Server Fedoraproject Fedora 38

1 Github repository

An attacker, opening a HTTP/2 connection with an initial window size of 0, was able to block handling of that connection indefinitely in Apache HTTP Server. This could be used to exhaust worker resources in the server, similar to the well known "slow loris" attack patte...

Apache Software Foundation Apache Http Server Apache Http Server

When a HTTP/2 stream was reset (RST frame) by a client, there was a time window were the request's memory resources were not reclaimed immediately. Instead, de-allocation was deferred to connection close. A client could send new requests and resets, keeping the connection bu...

Apache Software Foundation Apache Http Server Apache Http Server Fedoraproject Fedora 37 Fedoraproject Fedora 38 Fedoraproject Fedora 39 Debian Debian Linux 10.0

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook