The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2024:2368 advisory.

    The mod_http2 Apache httpd module implements the HTTP2 protocol (h2+h2c) on top of libnghttp2 for httpd     2.4 servers.

    Security Fix(es):

    * httpd: mod_http2: DoS in HTTP/2 with initial window size 0 (CVE-2023-43622)

    * mod_http2: reset requests exhaust memory (incomplete fix of CVE-2023-44487) (CVE-2023-45802)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 9.4 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2024-2368 advisory.

    [2.0.26-1]
    - Resolves: RHEL-14691 - mod_http2 rebase to 2.0.26

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 11 / 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5662 advisory.

  - Out-of-bounds Read vulnerability in mod_macro of Apache HTTP Server.This issue affects Apache HTTP Server:
    through 2.4.57. (CVE-2023-31122)

  - Faulty input validation in the core of Apache allows malicious or exploitable backend/content generators     to split HTTP responses. This issue affects Apache HTTP Server: through 2.4.58. (CVE-2023-38709)

  - An attacker, opening a HTTP/2 connection with an initial window size of 0, was able to block handling of     that connection indefinitely in Apache HTTP Server. This could be used to exhaust worker resources in the     server, similar to the well known slow loris attack pattern. This has been fixed in version 2.4.58, so     that such connection are terminated properly after the configured connection timeout. This issue affects     Apache HTTP Server: from 2.4.55 through 2.4.57. Users are recommended to upgrade to version 2.4.58, which     fixes the issue. (CVE-2023-43622)

  - When a HTTP/2 stream was reset (RST frame) by a client, there was a time window were the request's memory     resources were not reclaimed immediately. Instead, de-allocation was deferred to connection close. A     client could send new requests and resets, keeping the connection busy and open and causing the memory     footprint to keep on growing. On connection close, all resources were reclaimed, but the process might run     out of memory before that. This was found by the reporter during testing of CVE-2023-44487 (HTTP/2 Rapid     Reset Exploit) with their own test client. During normal HTTP/2 use, the probability to hit this bug is     very low. The kept memory would not become noticeable before the connection closes or times out. Users are     recommended to upgrade to version 2.4.58, which fixes the issue. (CVE-2023-45802)

  - HTTP Response splitting in multiple modules in Apache HTTP Server allows an attacker that can inject     malicious response headers into backend applications to cause an HTTP desynchronization attack. Users are     recommended to upgrade to version 2.4.59, which fixes this issue. (CVE-2024-24795)

  - HTTP/2 incoming headers exceeding the limit are temporarily buffered in nghttp2 in order to generate an     informative HTTP 413 response. If a client does not stop sending headers, this leads to memory exhaustion.
    (CVE-2024-27316)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version MAIN 7.02, has httpd packages installed that are affected by multiple vulnerabilities:

  - Vulnerability in core of Apache HTTP Server 2.4.59 and earlier are vulnerably to information disclosure,     SSRF or local script execution via backend applications whose response headers are malicious or     exploitable. Users are recommended to upgrade to version 2.4.60, which fixes this issue. (CVE-2024-38476)

  - Out-of-bounds Read vulnerability in mod_macro of Apache HTTP Server.This issue affects Apache HTTP Server:
    through 2.4.57. (CVE-2023-31122)

  - An attacker, opening a HTTP/2 connection with an initial window size of 0, was able to block handling of     that connection indefinitely in Apache HTTP Server. This could be used to exhaust worker resources in the     server, similar to the well known slow loris attack pattern. This has been fixed in version 2.4.58, so     that such connection are terminated properly after the configured connection timeout. This issue affects     Apache HTTP Server: from 2.4.55 through 2.4.57. Users are recommended to upgrade to version 2.4.58, which     fixes the issue. (CVE-2023-43622)

  - When a HTTP/2 stream was reset (RST frame) by a client, there was a time window were the request's memory     resources were not reclaimed immediately. Instead, de-allocation was deferred to connection close. A     client could send new requests and resets, keeping the connection busy and open and causing the memory     footprint to keep on growing. On connection close, all resources were reclaimed, but the process might run     out of memory before that. This was found by the reporter during testing of CVE-2023-44487 (HTTP/2 Rapid     Reset Exploit) with their own test client. During normal HTTP/2 use, the probability to hit this bug is     very low. The kept memory would not become noticeable before the connection closes or times out. Users are     recommended to upgrade to version 2.4.58, which fixes the issue. (CVE-2023-45802)

  - Serving WebSocket protocol upgrades over a HTTP/2 connection could result in a Null Pointer dereference,     leading to a crash of the server process, degrading performance. (CVE-2024-36387)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of httpd24 installed on the remote host is prior to 2.4.58-1.101. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2023-1877 advisory.

    Out-of-bounds Read vulnerability in mod_macro of Apache HTTP Server.This issue affects Apache HTTP Server:
    through 2.4.57. (CVE-2023-31122)

    A flaw was found in httpd. This flaw allows an attacker opening an HTTP/2 connection with an initial     window size of 0 to block handling of that connection indefinitely in the Apache HTTP Server. This     vulnerability can exhaust worker resources in the server, similar to the well-known slow loris attack     pattern. (CVE-2023-43622)

    DescriptionA flaw was found in mod_http2. When a HTTP/2 stream is reset (RST frame) by a client, there is     a time window were the request's memory resources were not reclaimed immediately. Instead, de-allocation     was deferred to connection close. A client could send new requests and resets, keeping the connection busy     and open, causing the memory footprint to keep on growing. On connection close, all resources are     reclaimed but the process might run out of memory before connection close.

    StatementDuring normal HTTP/2 use, the probability of encountering this issue is very low. The kept     memory would not become noticeable before the connection closes or times out.

    MitigationMitigation for this issue is either not available or the currently available options don't meet     the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread     installation base or stability. (CVE-2023-45802)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2023-433 advisory.

    Out-of-bounds Read vulnerability in mod_macro of Apache HTTP Server.This issue affects Apache HTTP Server:
    through 2.4.57. (CVE-2023-31122)

    A flaw was found in httpd. This flaw allows an attacker opening an HTTP/2 connection with an initial     window size of 0 to block handling of that connection indefinitely in the Apache HTTP Server. This     vulnerability can exhaust worker resources in the server, similar to the well-known slow loris attack     pattern. (CVE-2023-43622)

    DescriptionA flaw was found in mod_http2. When a HTTP/2 stream is reset (RST frame) by a client, there is     a time window were the request's memory resources were not reclaimed immediately. Instead, de-allocation     was deferred to connection close. A client could send new requests and resets, keeping the connection busy     and open, causing the memory footprint to keep on growing. On connection close, all resources are     reclaimed but the process might run out of memory before connection close.

    StatementDuring normal HTTP/2 use, the probability of encountering this issue is very low. The kept     memory would not become noticeable before the connection closes or times out.

    MitigationMitigation for this issue is either not available or the currently available options don't meet     the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread     installation base or stability. (CVE-2023-45802)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 20.04 LTS / 22.04 LTS / 23.04 / 23.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6506-1 advisory.

    David Shoon discovered that the Apache HTTP Server mod_macro module incorrectly handled certain memory     operations. A remote attacker could possibly use this issue to cause the server to crash, resulting in a     denial of service. (CVE-2023-31122)

    Prof. Sven Dietrich, Isa Jafarov, Prof. Heejo Lee, and Choongin Lee discovered that the Apache HTTP Server     incorrectly handled certain HTTP/2 connections. A remote attacker could possibly use this issue to cause     the server to consume resources, leading to a denial of service. This issue only affected Ubuntu 23.04,     and Ubuntu 23.10. (CVE-2023-43622)

    Will Dormann and David Warren discovered that the Apache HTTP Server incorrectly handled memory when     handling HTTP/2 connections. A remote attacker could possibly use this issue to cause the server to     consume resources, leading to a denial of service. (CVE-2023-45802)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2024:0664 advisory.

    Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:

    CVE-2023-31122:
    Out-of-bounds Read vulnerability in mod_macro of Apache HTTP Server.This issue affects Apache HTTP Server:
    through 2.4.57.

    CVE-2023-45802:
    When a HTTP/2 stream was reset (RST frame) by a client, there was a time window were the request's memory     resources were not reclaimed immediately. Instead, de-allocation was deferred to connection close. A     client could send new requests and resets, keeping the connection busy and open and causing the memory     footprint to keep on growing. On connection close, all resources were reclaimed, but the process might run     out of memory before that.

    This was found by the reporter during testing ofCVE-2023-44487 (HTTP/2 Rapid Reset Exploit) with their     own test client. During normal HTTP/2 use, the probability to hit this bug is very low. The kept memory     would not become noticeable before the connection closes or times out.

    Users are recommended to upgrade to version 2.4.58, which fixes the issue.

    CVE-2023-43622:
    An attacker, opening a HTTP/2 connection with an initial window size of 0, was able to block handling of     that connection indefinitely in Apache HTTP Server. This could be used to exhaust worker resources in the     server, similar to the well known slow loris attack pattern.
    This has been fixed in version 2.4.58, so that such connection are terminated properly after the     configured connection timeout.

    This issue affects Apache HTTP Server: from 2.4.55 through 2.4.57.

    Users are recommended to upgrade to version 2.4.58, which fixes the issue.

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2024-7933:02 advisory.

    * httpd: mod_http2: DoS in HTTP/2 with initial window size 0 (CVE-2023-43622)
      * mod_http2: reset requests exhaust memory (incomplete fix of CVE-2023-44487) (CVE-2023-45802)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to its self-reported version, the Tenable Security Center running on the remote host is affected by multiple vulnerabilities as referenced in the TNS-2023-42 advisory.

  - Security Center leverages third-party software to help provide underlying functionality. Several of the     third-party components (Apache, SimpleSAMLphp) were found to contain vulnerabilities, and updated versions     have been made available by the providers.Out of caution and in line with best practice, Tenable has opted     to upgrade these components to address the potential impact of the issues. Security Center 6.2.1 updates     Apache to version 2.4.58 and SimpleSAMLphp to version 2.0.7 to address the identified vulnerabilities.
    Tenable has released Security Center 6.2.1 to address these issues. The installation files can be obtained     from the Tenable Downloads Portal: https://www.tenable.com/downloads/security-center (CVE-2023-43622,     CVE-2023-45802)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

An update of the httpd package has been released.

According to its self-reported version, the Tenable SecurityCenter running on the remote host is . It is, therefore, affected by multiple vulnerabilities as referenced in the TNS-2023-44 advisory.

  - Security Center leverages third-party software to help provide underlying functionality. One of the third-     party components (Apache) was found to contain vulnerabilities, and updated versions have been made     available by the providers. Out of caution and in line with best practice, Tenable has opted to upgrade     these components to address the potential impact of the issues. Security Center Patch SC-202312.1 updates     Apache to version 2.4.58 to address the identified vulnerabilities. Tenable has released Security Center     Patch SC-202312.1 to address these issues. The installation files can be obtained from the Tenable     Downloads Portal: https://www.tenable.com/downloads/security-center (CVE-2023-43622, CVE-2023-45802)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 05b7180b-e571-11ee-a1c0-0050569f0b83 advisory.

  - An attacker, opening a HTTP/2 connection with an initial window size of 0, was able to block handling of     that connection indefinitely in Apache HTTP Server. This could be used to exhaust worker resources in the     server, similar to the well known slow loris attack pattern. This has been fixed in version 2.4.58, so     that such connection are terminated properly after the configured connection timeout. This issue affects     Apache HTTP Server: from 2.4.55 through 2.4.57. Users are recommended to upgrade to version 2.4.58, which     fixes the issue. (CVE-2023-43622)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of httpd / mod_http2 installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-43622 advisory.

  - An attacker, opening a HTTP/2 connection with an initial window size of 0, was able to block handling of     that connection indefinitely in Apache HTTP Server. This could be used to exhaust worker resources in the     server, similar to the well known slow loris attack pattern. This has been fixed in version 2.4.58, so     that such connection are terminated properly after the configured connection timeout. This issue affects     Apache HTTP Server: from 2.4.55 through 2.4.57. Users are recommended to upgrade to version 2.4.58, which     fixes the issue. (CVE-2023-43622)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
194802	RHEL 9 : mod_http2 (RHSA-2024:2368)	Nessus	Red Hat Local Security Checks	2024/4/30	2024/11/7	high
195044	Oracle Linux 9 : mod_http2 (ELSA-2024-2368)	Nessus	Oracle Linux Local Security Checks	2024/5/6	2025/9/9	high
193369	Debian dsa-5662 : apache2 - security update	Nessus	Debian Local Security Checks	2024/4/16	2024/7/12	high
242800	NewStart CGSL MAIN 7.02 : httpd Multiple Vulnerabilities (NS-SA-2025-0132)	Nessus	NewStart CGSL Local Security Checks	2025/7/25	2025/7/25	critical
184389	Amazon Linux AMI : httpd24 (ALAS-2023-1877)	Nessus	Amazon Linux Local Security Checks	2023/11/3	2024/12/11	high
185718	Amazon Linux 2023 : httpd, httpd-core, httpd-devel (ALAS2023-2023-433)	Nessus	Amazon Linux Local Security Checks	2023/11/15	2024/12/11	high
186191	Ubuntu 20.04 LTS / 22.04 LTS / 23.04 / 23.10 : Apache HTTP Server vulnerabilities (USN-6506-1)	Nessus	Ubuntu Local Security Checks	2023/11/22	2025/9/3	high
239861	TencentOS Server 4: httpd (TSSA-2024:0664)	Nessus	Tencent Local Security Checks	2025/6/16	2025/11/20	high
292942	MiracleLinux 9 : mod_http2-2.0.26-1.el9 (AXSA:2024-7933:02)	Nessus	Miracle Linux Local Security Checks	2026/1/20	2026/1/20	high
186172	Tenable Security Center 5.23.1 / 6.0.0 / 6.1.0 / 6.1.1 / 6.2.0 Multiple Vulnerabilities (TNS-2023-42)	Nessus	Misc.	2023/11/22	2023/12/19	high
204490	Photon OS 4.0: Httpd PHSA-2023-4.0-0502	Nessus	PhotonOS Local Security Checks	2024/7/24	2024/7/24	high
187074	Tenable SecurityCenter Multiple Vulnerabilities (TNS-2023-44)	Nessus	Misc.	2023/12/19	2024/5/10	high
192234	FreeBSD : www/varnish7 -- Denial of Service (05b7180b-e571-11ee-a1c0-0050569f0b83)	Nessus	FreeBSD Local Security Checks	2024/3/19	2024/3/19	high
236824	CBL Mariner 2.0 Security Update: httpd / mod_http2 (CVE-2023-43622)	Nessus	MarinerOS Local Security Checks	2025/5/16	2025/5/16	high

检测

插件搜索

high

high

high

critical

high

high

high

high

high

high

high

high

high

high