mirror of
https://github.com/CVEProject/cvelist.git
synced 2025-07-30 18:04:30 +00:00
113 lines
3.5 KiB
JSON
113 lines
3.5 KiB
JSON
{
|
|
"CVE_data_meta" : {
|
|
"ASSIGNER" : "security@apache.org",
|
|
"DATE_PUBLIC" : "2018-07-17",
|
|
"ID" : "CVE-2018-1333",
|
|
"STATE" : "PUBLIC",
|
|
"TITLE" : "DoS for HTTP/2 connections by crafted requests"
|
|
},
|
|
"affects" : {
|
|
"vendor" : {
|
|
"vendor_data" : [
|
|
{
|
|
"product" : {
|
|
"product_data" : [
|
|
{
|
|
"product_name" : "Apache HTTP Server",
|
|
"version" : {
|
|
"version_data" : [
|
|
{
|
|
"version_value" : "Fixed in Apache HTTP Server 2.4.34 (Affected 2.4.18-2.4.30,2.4.33)"
|
|
}
|
|
]
|
|
}
|
|
}
|
|
]
|
|
},
|
|
"vendor_name" : "Apache Software Foundation"
|
|
}
|
|
]
|
|
}
|
|
},
|
|
"credit" : [
|
|
{
|
|
"lang" : "eng",
|
|
"value" : "The issue was discovered by Craig Young of Tripwire VERT."
|
|
}
|
|
],
|
|
"data_format" : "MITRE",
|
|
"data_type" : "CVE",
|
|
"data_version" : "4.0",
|
|
"description" : {
|
|
"description_data" : [
|
|
{
|
|
"lang" : "eng",
|
|
"value" : "By specially crafting HTTP/2 requests, workers would be allocated 60 seconds longer than necessary, leading to worker exhaustion and a denial of service. Fixed in Apache HTTP Server 2.4.34 (Affected 2.4.18-2.4.30,2.4.33)."
|
|
}
|
|
]
|
|
},
|
|
"impact" : [
|
|
{
|
|
"lang" : "eng",
|
|
"url" : "https://httpd.apache.org/security/impact_levels.html#low",
|
|
"value" : "low"
|
|
}
|
|
],
|
|
"problemtype" : {
|
|
"problemtype_data" : [
|
|
{
|
|
"description" : [
|
|
{
|
|
"lang" : "eng",
|
|
"value" : "(undefined)"
|
|
}
|
|
]
|
|
}
|
|
]
|
|
},
|
|
"references" : {
|
|
"reference_data" : [
|
|
{
|
|
"name" : "https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2018-1333",
|
|
"refsource" : "CONFIRM",
|
|
"url" : "https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2018-1333"
|
|
},
|
|
{
|
|
"name" : "https://security.netapp.com/advisory/ntap-20180926-0007/",
|
|
"refsource" : "CONFIRM",
|
|
"url" : "https://security.netapp.com/advisory/ntap-20180926-0007/"
|
|
},
|
|
{
|
|
"name" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03909en_us",
|
|
"refsource" : "CONFIRM",
|
|
"url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03909en_us"
|
|
},
|
|
{
|
|
"name" : "RHSA-2018:3558",
|
|
"refsource" : "REDHAT",
|
|
"url" : "https://access.redhat.com/errata/RHSA-2018:3558"
|
|
},
|
|
{
|
|
"name" : "RHSA-2019:0366",
|
|
"refsource" : "REDHAT",
|
|
"url" : "https://access.redhat.com/errata/RHSA-2019:0366"
|
|
},
|
|
{
|
|
"name" : "RHSA-2019:0367",
|
|
"refsource" : "REDHAT",
|
|
"url" : "https://access.redhat.com/errata/RHSA-2019:0367"
|
|
},
|
|
{
|
|
"name" : "USN-3783-1",
|
|
"refsource" : "UBUNTU",
|
|
"url" : "https://usn.ubuntu.com/3783-1/"
|
|
},
|
|
{
|
|
"name" : "1041402",
|
|
"refsource" : "SECTRACK",
|
|
"url" : "http://www.securitytracker.com/id/1041402"
|
|
}
|
|
]
|
|
}
|
|
}
|