CVE-2018-1333

DoS for HTTP/2 connections by crafted requests

published June 18, 2018

CVSS
—
EPSS
17%
Percentile
97.1
In the wild
Unconfirmed
What it is

By specially crafting HTTP/2 requests, workers would be allocated 60 seconds longer than necessary, leading to worker exhaustion and a denial of service. Fixed in Apache HTTP Server 2.4.34 (Affected 2.4.18-2.4.30,2.4.33).

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.17098 · 97.1th percentile
Published
2018-06-18T18:00Z
EPSS history
Timeline
  • 18 JUN 18:00Z
    DoS for HTTP/2 connections by crafted requests
    cvelistv5