Approved changes feed: RSS · Atom

cpe:2.3:a:apache:http_server:2.4.30:*:*:*:*:*:*:*

part: a version: 2.4.30 update: *

VendorApache (b0303047-b7dd-5cf8-abcc-71b7d9d80b95)
ProductHttp Server (294238f2-8bb7-5c9e-8927-fa193467c02f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:apache/httpd purl2cpe 2026-06-01 10:14:24.096217
pkg:docker/apache/httpd purl2cpe 2026-06-01 10:14:24.096219
pkg:github/apache/httpd purl2cpe 2026-06-01 10:14:24.096221
pkg:rpm/fedora/httpd purl2cpe 2026-06-01 10:14:24.096222

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-17189 vulnerable 2026-06-08 05:11:06.116963 Details available
In Apache HTTP server versions 2.4.37 and prior, by sending request bodies in a slow loris way to plain resources, the h2 stream for that request unnecessarily occupied a server thread cleaning up that incoming data. This affects only HTTP/2 (mod_http2) connections.
Published: 2019-01-30T22:00:00.000Z
Updated: 2024-09-17T01:21:57.609Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.