| Package | Affected versions | Patched versions |
|---|---|---|
| http server | ≥ 2.4.18, ≤ 2.4.39 | |
| communications element manager | = 8.0.0= 8.1.0= 8.1.1= 8.2.0 | |
| enterprise manager ops center | = 12.3.3= 12.4.0= 12.4.0.0 | |
| http server | = 12.2.1.3.0= 12.2.1.4.0 | |
| instantis enterprisetrack | ≥ 17.1, ≤ 17.3 | |
| retail xstore point of service | = 7.1 |
In Apache HTTP Server 2.4.18-2.4.39, using fuzzed network input, the http/2 session handling could be made to read memory after being freed, during connection shutdown.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free