VYPR
High severity7.5NVD Advisory· Published Jul 26, 2017· Updated May 13, 2026

CVE-2017-7659

CVE-2017-7659

Description

A maliciously constructed HTTP/2 request could cause mod_http2 in Apache HTTP Server 2.4.24, 2.4.25 to dereference a NULL pointer and crash the server process.

Affected products

3
  • cpe:2.3:a:apache:http_server:2.4.24:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:apache:http_server:2.4.24:*:*:*:*:*:*:*
    • cpe:2.3:a:apache:http_server:2.4.25:*:*:*:*:*:*:*
  • Apache Software Foundation/Apache HTTP Serverv5
    Range: 2.4.24, 2.4.25

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

24

News mentions

0

No linked articles in our index yet.