[Git][security-tracker-team/security-tracker][master] Add CVE-2018-17189/apache2

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
b79dc8a5 by Salvatore Bonaccorso at 2019-01-22T22:30:24Z
Add CVE-2018-17189/apache2

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -22656,8 +22656,12 @@ CVE-2018-17191 (Apache NetBeans (incubating) 9.0 NetBeans Proxy Auto-Configurati
 	NOTE: https://www.openwall.com/lists/oss-security/2018/12/30/1
 CVE-2018-17190 (In all versions of Apache Spark, its standalone resource manager ...)
 	NOT-FOR-US: Apache Spark
-CVE-2018-17189
+CVE-2018-17189 [mod_http2, DoS via slow, unneeded request bodies]
 	RESERVED
+	- apache2 <unfixed>
+	[jessie] - apache2 <not-affected> (Vulnerable code not present)
+	NOTE: HTTP/2 support introduced in 2.4.17
+	NOTE: https://www.openwall.com/lists/oss-security/2019/01/22/2
 CVE-2018-17188 (Prior to CouchDB version 2.3.0, CouchDB allowed for ...)
 	- couchdb <removed>
 	NOTE: https://www.openwall.com/lists/oss-security/2018/12/17/1



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/b79dc8a5cb1fa8bb81c18ee6f32bdf5851a3ce50

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/b79dc8a5cb1fa8bb81c18ee6f32bdf5851a3ce50
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20190122/2534fcfe/attachment.html>