Uncontrolled Resource Consumption ('Resource Exhaustion') Affecting apache/httpd package, versions [,2.4.59)
Snyk CVSS
Attack Complexity
Low
Availability
High
Threat Intelligence
EPSS
0.04% (10th
percentile)
Do your applications use this vulnerable package?
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applications- Snyk ID SNYK-UNMANAGED-APACHEHTTPD-6564974
- published 5 Apr 2024
- disclosed 3 Apr 2024
- credit Bartek Nowotarski
Introduced: 3 Apr 2024
CVE-2024-27316 Open this link in a new tabHow to fix?
Upgrade apache/httpd
to version 2.4.59 or higher.
Overview
Affected versions of this package are vulnerable to Uncontrolled Resource Consumption ('Resource Exhaustion') due to insufficient limitations on the amount of CONTINUATION
frames that can be sent within a single stream. An attacker can use up compute or memory resources to cause a disruption in service by sending packets to vulnerable servers.