Apache Httpd CVE-2016-1546 Denial of Service Vulnerability

description-logoDescription

By manipulating the flow control windows on streams, a client was able to block server threads for long times, causing starvation of worker threads. Connections could still be opened, but no streams where processed for these. This issue affected HTTP/2 support in 2.4.17 and 2.4.18.

affected-products-logoAffected Applications

Apache Httpd

CVE References

CVE-2016-1546