| Package | Affected versions | Patched versions |
|---|---|---|
| http server | ≥ 2.4.20, < 2.4.44 | 2.4.44 |
| communications element manager | ≥ 8.2.0, ≤ 8.2.2 | |
| communications session report manager | ≥ 8.2.0, ≤ 8.2.2 | |
| communications session route manager | ≥ 8.2.0, ≤ 8.2.2 | |
| enterprise manager ops center | = 12.4.0.0 | |
| hyperion infrastructure technology | = 11.1.2.4 | |
| instantis enterprisetrack | = 17.1= 17.2= 17.3 | |
| zfs storage appliance kit | = 8.8 |
Apache HTTP Server versions 2.4.20 to 2.4.43 When trace/debug was enabled for the HTTP/2 module and on certain traffic edge patterns, logging statements were made on the wrong connection, causing concurrent use of memory pools. Configuring the LogLevel of mod_http2 above "info" will mitigate this vulnerability for unpatched servers.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free