CVE-2017-9789
Fixed in a distro release EPSS 10%
When under stress, closing many connections, the HTTP/2 handling code in Apache httpd 2.4.26 would sometimes access memory after it has been freed, resulting in potentially erratic behaviour.
Products: Apache Software Foundation Apache HTTP Server
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Alpine 3.3 | apache2 | 2.4.27-r0 |
| Alpine 3.4 | apache2 | 2.4.27-r0 |
| Alpine 3.5 | apache2 | 2.4.27-r0 |
| Alpine 3.6 | apache2 | 2.4.27-r0 |
| Arch Linux | apache | 2.4.27-1 |
| SUSE Linux Enterprise Server 12 SP2 | apache2 | 2.4.23-29.13.1 |
| SUSE Linux Enterprise Server 12 SP3 | apache2 | 2.4.23-29.13.1 |
| SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 | apache2 | 2.4.23-29.13.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP2 | apache2 | 2.4.23-29.13.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | apache2 | 2.4.23-29.13.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP2 | apache2 | 2.4.23-29.13.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP3 | apache2 | 2.4.23-29.13.1 |