[Git][security-tracker-team/security-tracker][master] Add CVE-2018-11763/apache2

Salvatore Bonaccorso carnil at debian.org
Tue Sep 25 15:10:43 BST 2018


Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
cab32bfe by Salvatore Bonaccorso at 2018-09-25T14:10:21Z
Add CVE-2018-11763/apache2

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -13742,8 +13742,11 @@ CVE-2018-11765
 	RESERVED
 CVE-2018-11764
 	RESERVED
-CVE-2018-11763
+CVE-2018-11763 [mod_http2, DoS via continuous SETTINGS frames]
 	RESERVED
+	- apache2 <unfixed>
+	[jessie] - apache2 <not-affected> (Vulnerable code not present)
+	NOTE: HTTP/2 support introduced in 2.4.17
 CVE-2018-11762 (In Apache Tika 0.9 to 1.18, in a rare edge case where a user does not ...)
 	- tika <unfixed>
 	[jessie] - tika <ignored> (Minor issue)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/cab32bfe48b89047c51ff030cd863e3a8c959eb7

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/cab32bfe48b89047c51ff030cd863e3a8c959eb7
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20180925/b3d2c47b/attachment-0001.html>


More information about the debian-security-tracker-commits mailing list