CVE-2017-7659

A maliciously constructed HTTP/2 request could cause mod_http2 in Apache HTTP Server 2.4.24, 2.4.25 to dereference a NULL pointer and crash the server process.

References

Affected packages

Git / github.com/apache/httpd

Affected ranges

Type

GIT

Repo

https://github.com/apache/httpd

Events

Introduced

Last affected

68efa7025a071be93c7e755839529ac6bd984d56

Last affected

954dfbe8a95dac3b93e12761f65754104f1696ea

Database specific

{
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.4.24"
        },
        {
            "last_affected": "2.4.25"
        }
    ],
    "source": "CPE_FIELD",
    "cpe": [
        "cpe:2.3:a:apache:http_server:2.4.24:*:*:*:*:*:*:*",
        "cpe:2.3:a:apache:http_server:2.4.25:*:*:*:*:*:*:*"
    ]
}

Affected versions

2.*

2.4.24

2.4.25

Database specific

source

"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2017-7659.json"