CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2018-17189

In Apache HTTP server versions 2.4.37 and prior, by sending request bodies in a slow loris way to plain resources, the h2 stream for that request unnecessarily occupied a server thread cleaning up that incoming data. This affects only HTTP/2 (mod_http2) connections.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.049

EPSS Ranking 89.0%

CVSS Severity

CVSS v3 Score 5.3

CVSS v2 Score 5.0

References

Products affected by CVE-2018-17189

Apache » Http Server » Version: 2.4.17

cpe:2.3:a:apache:http_server:2.4.17
Apache » Http Server » Version: 2.4.18

cpe:2.3:a:apache:http_server:2.4.18
Apache » Http Server » Version: 2.4.20

cpe:2.3:a:apache:http_server:2.4.20
Apache » Http Server » Version: 2.4.23

cpe:2.3:a:apache:http_server:2.4.23
Apache » Http Server » Version: 2.4.25

cpe:2.3:a:apache:http_server:2.4.25
Apache » Http Server » Version: 2.4.26

cpe:2.3:a:apache:http_server:2.4.26
Apache » Http Server » Version: 2.4.27

cpe:2.3:a:apache:http_server:2.4.27
Apache » Http Server » Version: 2.4.28

cpe:2.3:a:apache:http_server:2.4.28
Apache » Http Server » Version: 2.4.29

cpe:2.3:a:apache:http_server:2.4.29
Apache » Http Server » Version: 2.4.30

cpe:2.3:a:apache:http_server:2.4.30
Apache » Http Server » Version: 2.4.33

cpe:2.3:a:apache:http_server:2.4.33
Apache » Http Server » Version: 2.4.34

cpe:2.3:a:apache:http_server:2.4.34
Apache » Http Server » Version: 2.4.35

cpe:2.3:a:apache:http_server:2.4.35
Apache » Http Server » Version: 2.4.37

cpe:2.3:a:apache:http_server:2.4.37
Netapp » Santricity Cloud Connector » Version: N/A

cpe:2.3:a:netapp:santricity_cloud_connector:-
Netapp » Storage Automation Store » Version: N/A

cpe:2.3:a:netapp:storage_automation_store:-
Oracle » Enterprise Manager Ops Center » Version: 12.3.3

cpe:2.3:a:oracle:enterprise_manager_ops_center:12.3.3
Oracle » Hospitality Guest Access » Version: 4.2.0

cpe:2.3:a:oracle:hospitality_guest_access:4.2.0
Oracle » Hospitality Guest Access » Version: 4.2.1

cpe:2.3:a:oracle:hospitality_guest_access:4.2.1
Oracle » Instantis Enterprisetrack » Version: 17.1

cpe:2.3:a:oracle:instantis_enterprisetrack:17.1
Oracle » Instantis Enterprisetrack » Version: 17.2

cpe:2.3:a:oracle:instantis_enterprisetrack:17.2
Oracle » Instantis Enterprisetrack » Version: 17.3

cpe:2.3:a:oracle:instantis_enterprisetrack:17.3
Oracle » Retail Xstore Point Of Service » Version: 7.0

cpe:2.3:a:oracle:retail_xstore_point_of_service:7.0
Oracle » Retail Xstore Point Of Service » Version: 7.1

cpe:2.3:a:oracle:retail_xstore_point_of_service:7.1
Oracle » Sun Zfs Storage Appliance Kit » Version: 8.8.6

cpe:2.3:a:oracle:sun_zfs_storage_appliance_kit:8.8.6
Redhat » Jboss Core Services » Version: 1.0

cpe:2.3:a:redhat:jboss_core_services:1.0
Canonical » Ubuntu Linux » Version: 14.04

cpe:2.3:o:canonical:ubuntu_linux:14.04
Canonical » Ubuntu Linux » Version: 16.04

cpe:2.3:o:canonical:ubuntu_linux:16.04
Canonical » Ubuntu Linux » Version: 18.04

cpe:2.3:o:canonical:ubuntu_linux:18.04
Canonical » Ubuntu Linux » Version: 18.10

cpe:2.3:o:canonical:ubuntu_linux:18.10
Debian » Debian Linux » Version: 9.0

cpe:2.3:o:debian:debian_linux:9.0
Fedoraproject » Fedora » Version: 28

cpe:2.3:o:fedoraproject:fedora:28
Fedoraproject » Fedora » Version: 29

cpe:2.3:o:fedoraproject:fedora:29
Redhat » Enterprise Linux » Version: 6.0

cpe:2.3:o:redhat:enterprise_linux:6.0
Redhat » Enterprise Linux » Version: 7.0

cpe:2.3:o:redhat:enterprise_linux:7.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2018-17189

Products

Pricing

Contact Us