According to the versions of the mod_http2 package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    HTTP/2 incoming headers exceeding the limit are temporarily buffered in nghttp2 in order to generate an     informative HTTP 413 response. If a client does not stop sending headers, this leads to memory     exhaustion.(CVE-2024-27316)

Tenable has extracted the preceding description block directly from the EulerOS mod_http2 security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the httpd packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    Faulty input validation in the core of Apache allows malicious or exploitable backend/content generators     to split HTTP responses.(CVE-2023-38709)

    HTTP Response splitting in multiple modules in Apache HTTP Server allows an attacker that can inject     malicious response headers into backend applications to cause an HTTP desynchronization attack.Users are     recommended to upgrade to version 2.4.59, which fixes this issue.(CVE-2024-24795)

    HTTP/2 incoming headers exceeding the limit are temporarily buffered in nghttp2 in order to generate an     informative HTTP 413 response. If a client does not stop sending headers, this leads to memory     exhaustion.(CVE-2024-27316)

Tenable has extracted the preceding description block directly from the EulerOS httpd security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the httpd packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    Faulty input validation in the core of Apache allows malicious or exploitable backend/content generators     to split HTTP responses.(CVE-2023-38709)

    HTTP/2 incoming headers exceeding the limit are temporarily buffered in nghttp2 in order to generate an     informative HTTP 413 response. If a client does not stop sending headers, this leads to memory     exhaustion.(CVE-2024-27316)

    HTTP Response splitting in multiple modules in Apache HTTP Server allows an attacker that can inject     malicious response headers into backend applications to cause an HTTP desynchronization attack.Users are     recommended to upgrade to version 2.4.59, which fixes this issue.(CVE-2024-24795)

Tenable has extracted the preceding description block directly from the EulerOS httpd security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the mod_http2 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

    HTTP/2 incoming headers exceeding the limit are temporarily buffered in nghttp2 in order to generate an     informative HTTP 413 response. If a client does not stop sending headers, this leads to memory     exhaustion.(CVE-2024-27316)

Tenable has extracted the preceding description block directly from the EulerOS Virtualization mod_http2 security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the httpd packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    HTTP Response splitting in multiple modules in Apache HTTP Server allows an attacker that can inject     malicious response headers into backend applications to cause an HTTP desynchronization attack.Users are     recommended to upgrade to version 2.4.59, which fixes this issue.(CVE-2024-24795)

    Faulty input validation in the core of Apache allows malicious or exploitable backend/content generators     to split HTTP responses.This issue affects Apache HTTP Server: through 2.4.58.(CVE-2023-38709)

    HTTP/2 incoming headers exceeding the limit are temporarily buffered in nghttp2 in order to generate an     informative HTTP 413 response. If a client does not stop sending headers, this leads to memory     exhaustion.(CVE-2024-27316)

Tenable has extracted the preceding description block directly from the EulerOS httpd security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the httpd packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

    HTTP/2 incoming headers exceeding the limit are temporarily buffered in nghttp2 in order to generate an     informative HTTP 413 response. If a client does not stop sending headers, this leads to memory     exhaustion.(CVE-2024-27316)

    Faulty input validation in the core of Apache allows malicious or exploitable backend/content generators     to split HTTP responses.This issue affects Apache HTTP Server: through 2.4.58.(CVE-2023-38709)

    HTTP Response splitting in multiple modules in Apache HTTP Server allows an attacker that can inject     malicious response headers into backend applications to cause an HTTP desynchronization attack.Users are     recommended to upgrade to version 2.4.59, which fixes this issue.(CVE-2024-24795)

Tenable has extracted the preceding description block directly from the EulerOS Virtualization httpd security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
200963	EulerOS 2.0 SP11 : mod_http2 (EulerOS-SA-2024-1819)	Nessus	Huawei Local Security Checks	2024/6/25	2024/6/25	high
202434	EulerOS 2.0 SP10 : httpd (EulerOS-SA-2024-1886)	Nessus	Huawei Local Security Checks	2024/7/15	2024/7/15	high
202542	EulerOS 2.0 SP9 : httpd (EulerOS-SA-2024-1936)	Nessus	Huawei Local Security Checks	2024/7/16	2024/7/16	high
205898	EulerOS Virtualization 2.11.0 : mod_http2 (EulerOS-SA-2024-2196)	Nessus	Huawei Local Security Checks	2024/8/20	2024/8/20	high
205935	EulerOS 2.0 SP12 : httpd (EulerOS-SA-2024-2239)	Nessus	Huawei Local Security Checks	2024/8/20	2024/8/20	high
205966	EulerOS Virtualization 2.11.1 : httpd (EulerOS-SA-2024-2168)	Nessus	Huawei Local Security Checks	2024/8/21	2024/8/21	high

检测

插件搜索

high

high

high

high

high

high