BSA-2018-553
21657
20 September 2018
30 March 2018
Closed
Low
5.9
N/A
CVE-2018-1302
Summary
Security Advisory ID : BSA-2018-553
Component : Apache HTTPD
Revision : 2.0: Final
When an HTTP/2 stream was destroyed after being handled, the Apache HTTP Server prior to version 2.4.33 could have written a NULL pointer potentially to an already freed memory.
The memory pools maintained by the server make this vulnerability hard to trigger in usual configurations, the reporter and the team could not reproduce it outside debug builds, so it is classified as low risk.
Affected Products
No Brocade Fibre Channel technology products from Broadcom are currently known to be affected by this vulnerability.
Revision History
| Version | Change | Date |
|---|---|---|
| 1.0 | Initial Publication | Mar 30, 2018 |
| 2.0 | Updated FOS | Sept 20, 2018 |