Bugzilla will be upgraded to version 5.0 on a still to be determined date in the near future. The original upgrade date has been delayed.
First Last Prev Next    This bug is not in your last search results.
Bug 1560625 - (CVE-2018-1302) CVE-2018-1302 httpd: Use-after-free on HTTP/2 stream shutdown
CVE-2018-1302 httpd: Use-after-free on HTTP/2 stream shutdown
Status: NEW
Product: Security Response
Classification: Other
Component: vulnerability (Show other bugs)
unspecified
All Linux
low Severity low
: ---
: ---
Assigned To: Red Hat Product Security
impact=low,public=20180321,reported=2...
: Security
Depends On: 1560626 1560627 1561569 1561570
Blocks: 1560402
  Show dependency tree / graph
 
Reported: 2018-03-26 11:24 EDT by Pedro Sampaio
Modified: 2018-10-25 11:14 EDT (History)
31 users (show)

See Also:
Fixed In Version: httpd 2.4.30
Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of:
Environment:
Last Closed:
Type: ---
Regression: ---
Mount Type: ---
Documentation: ---
CRM:
Verified Versions:
Category: ---
oVirt Team: ---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: ---

Attachments (Terms of Use)
Add an attachment (proposed patch, testcase, etc.)

  None (edit)
Description Pedro Sampaio 2018-03-26 11:24:40 EDT 
When an HTTP/2 stream was destroyed after being handled, the Apache HTTP Server
prior to version 2.4.30 could have written a NULL pointer potentially to an
already freed memory. The memory pools maintained by the server make this
vulnerabilty hard to trigger in usual configurations, the reporter and the team
could not reproduce it outside debug builds, so it is classified as low risk.

Versions Affected:
httpd 2.4.17 to 2.4.29

External references:

https://httpd.apache.org/security/vulnerabilities_24.html
Comment 1 Pedro Sampaio 2018-03-26 11:25:31 EDT 
Created httpd tracking bugs for this issue:

Affects: fedora-all [bug 1560627]
Comment 3 Pedro Sampaio 2018-03-28 10:36:09 EDT 
Created mod_http2 tracking bugs for this issue:

Affects: fedora-all [bug 1561570]
Note You need to log in before you can comment on or make changes to this bug.
First Last Prev Next    This bug is not in your last search results.