HTTP/2 (2.4.20 through 2.4.39) very early pushes, for example configured with "H2PushResource", could lead to an overwrite of memory in the pushing request's pool, leading to crashes. The memory copied is that of the configured push link header values, not data supplied by the client.
NOTE: The following CVSS v3.0 metrics and score provided are preliminary and subject to review.
|Base Score:||7.5||Base Metrics:||AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H|
|Access Vector:||Network||Attack Complexity:||Low|
|Privileges Required:||None||User Interaction:||None|
|Integrity Impact:||None||Availability Impact:||High|
|Oracle Linux version 8 (httpd)||ELSA-2020-4751||2020-11-10|
|Oracle Linux version 8 (mod_http2)||ELSA-2020-4751||2020-11-10|
|Oracle Linux version 8 (mod_md)||ELSA-2020-4751||2020-11-10|
This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team