VDB
BDU%3A2019-03780
BDU%3A2019-03780
PUBLISHED
CVSS 7.800000190734863 HIGH
Уязвимость реализации сетевого протокола HTTP/2 веб-сервера Apache HTTP Server, связанная с неконтролируемым расходом ресурса, позволяющая нарушителю раскрыть защищаемую информацию
Risk Scores
CVSS 2.0
7.800000190734863
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Canonical Ltd., Сообщество свободного программного обеспечения, Oracle Corp., Novell Inc., Fedora Project, Red Hat Inc., Apache Software Foundation, АО «НТЦ ИТ РОСА» | Ubuntu, Debian GNU/Linux, Enterprise Manager Ops Center, SUSE Linux Enterprise Server for SAP Applications, SUSE Linux Enterprise Software Development Kit, Suse Linux Enterprise Server, Fedora, SUSE Linux Enterprise Module for Web Scripting, Red Hat Enterprise Linux, SUSE Linux Enterprise Module for Basesystem, OpenSUSE Leap, SUSE Linux Enterprise Module for Server Applications, Traffic Server, ROSA Virtualization (запись в едином реестре российских программ №5091), ROSA Virtualization 3.0 (запись в едином реестре российских программ №21308) |
Timeline
- Oct 29, 2019 CVE Published
- Aug 19, 2025 CVE Updated
- Mar 18, 2026 Distribution Patch
- Mar 18, 2026 Security Advisory
References
- https://nvd.nist.gov/vuln/detail/CVE-2019-9517 url
- https://abf.rosa.ru/advisories/ROSA-SA-2025-2899 url
- https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2019-9517 advisory
- https://www.oracle.com/technetwork/topics/security/public-vuln-to-advisory-mapping-093627.html advisory
- https://usn.ubuntu.com/4113-1/ advisory
- https://access.redhat.com/errata/RHSA-2019:2893 advisory
- https://security-tracker.debian.org/tracker/CVE-2019-9517 advisory
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4ZQGHE3WTYLYAYJEIDJVF2FIGQTAYPMC/ advisory
- https://abf.rosa.ru/advisories/ROSA-SA-2025-2900 advisory
- https://abf.rosa.ru/advisories/ROSA-SA-2025-2860 advisory
- https://abf.rosa.ru/advisories/ROSA-SA-2025-2859 advisory