diff options
| author | Bernard Spil <brnrd@FreeBSD.org> | 2025-07-11 23:35:16 +0200 |
|---|---|---|
| committer | Bernard Spil <brnrd@FreeBSD.org> | 2025-07-11 23:35:16 +0200 |
| commit | 88df7e7efe3519f4605933b9ca2a82d4021c1bc1 (patch) | |
| tree | 68c9e2b2a66c0928956ab834a2cfd8245197937d | |
| parent | www/apache24: Security update to 2.4.64 (diff) | |
security/vuxml: Document mod_http2 vulnerabilities
| -rw-r--r-- | security/vuxml/vuln/2025.xml | 31 |
1 files changed, 31 insertions, 0 deletions
diff --git a/security/vuxml/vuln/2025.xml b/security/vuxml/vuln/2025.xml index 450de8b60b67..cbaccdd8f0ad 100644 --- a/security/vuxml/vuln/2025.xml +++ b/security/vuxml/vuln/2025.xml @@ -1,3 +1,34 @@ + <vuln vid="61d74f80-5e9e-11f0-8baa-8447094a420f"> + <topic>mod_http2 -- Multiple vulnerabilities</topic> + <affects> + <package> + <name>mod_http2</name> + <range><lt>2.0.33</lt></range> + </package> + </affects> + <description> + <body xmlns="http://www.w3.org/1999/xhtml"> + <p>The mod_http2 project reports:</p> + <blockquote cite="https://github.com/icing/mod_h2/releases/tag/v2.0.33"> + <p>a client can increase memory consumption for a HTTP/2 connection + via repeated request header names,leading to denial of service</p> + <p>certain proxy configurations whith mod_proxy_http2 as the + backend, an assertion can be triggered by certain requests, leading + to denial of service</p> + </blockquote> + </body> + </description> + <references> + <cvename>CVE-2025-53020</cvename> + <cvename>CVE-2025-49630</cvename> + <url>https://github.com/icing/mod_h2/releases/tag/v2.0.33</url> + </references> + <dates> + <discovery>2025-07-10</discovery> + <entry>2025-07-11</entry> + </dates> + </vuln> + <vuln vid="342f2a0a-5e9b-11f0-8baa-8447094a420f"> <topic>Apache httpd -- Multiple vulnerabilities</topic> <affects> |