| Package | Affected versions | Patched versions |
|---|---|---|
| http server | = 2.4.33≥ 2.4.18, ≤ 2.4.30 | |
| jboss core services | = 1.0 |
By specially crafting HTTP/2 requests, workers would be allocated 60 seconds longer than necessary, leading to worker exhaustion and a denial of service. Fixed in Apache HTTP Server 2.4.34 (Affected 2.4.18-2.4.30,2.4.33).
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free