mod_http2

Direct Vulnerabilities

Known vulnerabilities in the mod_http2 package. This does not include vulnerabilities belonging to this package’s dependencies.

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Vulnerability	Vulnerable Version
H HTTP Request Smuggling	<1:2.4.69-1.amzn2023.0.2
H Deployment of Wrong Handler	<1:2.4.69-1.amzn2023.0.2
H Path Equivalence	<1:2.4.69-1.amzn2023.0.2
H Authentication Bypass	<1:2.4.69-1.amzn2023.0.2
H Incorrect Calculation of Buffer Size	<1:2.4.69-1.amzn2023.0.2
H Files or Directories Accessible to External Parties	<1:2.4.69-1.amzn2023.0.2
H Use After Free	<1:2.4.69-1.amzn2023.0.2
H Server-Side Request Forgery (SSRF)	<1:2.4.69-1.amzn2023.0.2
H NULL Pointer Dereference	<1:2.4.69-1.amzn2023.0.2
H Out-of-bounds Write	<1:2.4.69-1.amzn2023.0.2
H Out-of-bounds Write	<1:2.4.69-1.amzn2023.0.2
H Out-of-bounds Write	<1:2.4.69-1.amzn2023.0.2
H Improper Privilege Management	<1:2.4.69-1.amzn2023.0.2
H Improper Cross-boundary Removal of Sensitive Data	<1:2.4.69-1.amzn2023.0.2
H Incorrect Implementation of Authentication Algorithm	<1:2.4.69-1.amzn2023.0.2
H Integer Overflow or Wraparound	<1:2.4.69-1.amzn2023.0.2
H NULL Pointer Dereference	<1:2.4.69-1.amzn2023.0.2
H Expired Pointer Dereference	<1:2.4.69-1.amzn2023.0.2
H Expired Pointer Dereference	<0:2.0.42-1.amzn2023.0.1
H Improper Handling of Highly Compressed Data (Data Amplification)	<0:2.0.42-1.amzn2023.0.1
H CVE-2026-23918	<0:2.0.39-1.amzn2023.0.1
M NULL Pointer Dereference	<0:2.0.27-1.amzn2023.0.3
H Resource Exhaustion	<0:2.0.27-1.amzn2023.0.2