- Vulnerability/
- USN-7469-4
USN-7469-4: H2O vulnerability
First published: Wed Apr 30 2025(Updated: )
USN-7469-1 fixed a vulnerability in Apache Traffic Server. This update provides the corresponding updates for H2O. Original advisory details: It was discovered that Apache Traffic Server exhibited poor server resource management in its HTTP/2 protocol. An attacker could possibly use this issue to cause Apache Traffic Server to crash, resulting in a denial of service.
| Affected Software | Affected Version | How to fix |
|---|---|---|
| All of | ||
| ubuntu/h2o | <2.2.4+dfsg-1ubuntu0.1~esm2 | 2.2.4+dfsg-1ubuntu0.1~esm2 |
| Ubuntu | =18.04 | |
| All of | ||
| ubuntu/libh2o0.13 | <2.2.4+dfsg-1ubuntu0.1~esm2 | 2.2.4+dfsg-1ubuntu0.1~esm2 |
| Ubuntu | =18.04 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://ubuntu.com/security/CVE-2023-44487
- https://ubuntu.com/security/notices/USN-6427-1
- https://ubuntu.com/security/notices/USN-6427-2
- https://ubuntu.com/security/notices/USN-6438-1
- https://ubuntu.com/security/notices/USN-6505-1
- https://ubuntu.com/security/notices/USN-6574-1
- https://ubuntu.com/security/notices/USN-6754-1
- https://ubuntu.com/security/notices/USN-6994-1
- https://ubuntu.com/security/notices/USN-7067-1
- https://ubuntu.com/security/notices/USN-7410-1
- https://ubuntu.com/security/notices/USN-7469-1
- https://ubuntu.com/security/notices/USN-7469-2
- https://ubuntu.com/security/notices/USN-7469-3
- https://ubuntu.com/security/notices/USN-7469-4 (Advisory)
Frequently Asked Questions
What is the severity of USN-7469-4?
The severity of USN-7469-4 is considered important due to the potential impact on resource management in Apache Traffic Server's HTTP/2 protocol.
How do I fix USN-7469-4?
To fix USN-7469-4, ensure that you update to the latest version of H2O, specifically 2.2.4+dfsg-1ubuntu0.1~esm2 for Ubuntu 18.04.
What products are affected by USN-7469-4?
USN-7469-4 affects the H2O package and libh2o0.13 on Ubuntu 18.04.
What vulnerability does USN-7469-4 address?
USN-7469-4 addresses a vulnerability related to poor server resource management in Apache Traffic Server's implementation of the HTTP/2 protocol.
Is USN-7469-4 related to any previous advisories?
Yes, USN-7469-4 is a continuation of fixes provided in USN-7469-1.
- collector/usn
- source/Ubuntu
- agent/software-canonical-lookup
- agent/last-modified-date
- agent/references
- agent/source
- agent/title
- agent/softwarecombine
- agent/description
- agent/tags
- agent/type
- agent/first-publish-date
- agent/event
- package-manager/ubuntu
- vendor/ubuntu
- canonical/ubuntu
- version/ubuntu/18.04