CVE-2018-17189

In Apache HTTP server versions 2.4.37 and prior, by sending request bodies in a slow loris way to plain resources, the h2 stream for that request unnecessarily…

published January 30, 2019

CVSS
—
EPSS
20%
Percentile
97.4
In the wild
Unconfirmed
What it is

In Apache HTTP server versions 2.4.37 and prior, by sending request bodies in a slow loris way to plain resources, the h2 stream for that request unnecessarily occupied a server thread cleaning up that incoming data. This affects only HTTP/2 (mod_http2) connections.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.20071 · 97.4th percentile
Published
2019-01-30T22:00Z
EPSS history
Timeline
  • 30 JAN 22:00Z
    In Apache HTTP server versions 2.4.37 and prior, by sending request bodies in a slow loris way to plain resources, the h2 stream for that request unnecessarily…
    cvelistv5