CVE-2020-9490

Published: Aug 7, 2020Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

Apache HTTP Server versions 2.4.20 to 2.4.43. A specially crafted value for the 'Cache-Digest' header in a HTTP/2 request would result in a crash when the server actually tries to HTTP/2 PUSH a resource afterwards. Configuring the HTTP/2 feature via "H2Push off" will mitigate this vulnerability for unpatched servers.

Affected (50)

Products: Apache: Http Server · Oracle: Communications Element Manager, Communications Session Report Manager, Communications Session Route Manager, Enterprise Manager Ops Center, Hyperion Infrastructure Technology, Instantis Enterprisetrack, Zfs Storage Appliance Kit · Opensuse: Leap · +4 more

Show all products

Apache

1 product

Http Server

Oracle

7 products

Communications Element Manager

Communications Session Report Manager

Communications Session Route Manager

Enterprise Manager Ops Center

Hyperion Infrastructure Technology

Instantis Enterprisetrack

Zfs Storage Appliance Kit

1 product

1 product

1 product

1 product

13 products

Enterprise Linux For Ibm Z Systems

Enterprise Linux For Ibm Z Systems Eus

Enterprise Linux For Power Little Endian

Enterprise Linux For Power Little Endian Eus

Enterprise Linux Server Aus

Enterprise Linux Server For Power Little Endian Update Services For Sap Solutions

Enterprise Linux Server Tus

Enterprise Linux Server Update Services For Sap Solutions

Openstack

Openstack For Ibm Power

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Apache Http Server	From 2.4.20 to 2.4.46

Configuration B

9 vulnerable

Vulnerable Software	Affected Versions
Oracle Communications Element Manager	From 8.2.0 to 8.2.2
Oracle Communications Session Report Manager	From 8.2.0 to 8.2.2
Oracle Communications Session Route Manager	From 8.2.0 to 8.2.2
Oracle Enterprise Manager Ops Center	Version 12.4.0.0
Oracle Hyperion Infrastructure Technology	Version 11.1.2.4
Oracle Instantis Enterprisetrack	Version 17.1
Oracle Instantis Enterprisetrack	Version 17.2
Oracle Instantis Enterprisetrack	Version 17.3
Oracle Zfs Storage Appliance Kit	Version 8.8

Configuration C

2 vulnerable

Vulnerable Software	Affected Versions
Opensuse Leap	Version 15.1
Opensuse Leap	Version 15.2

Configuration D

1 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 10.0

Configuration E

2 vulnerable

Vulnerable Software	Affected Versions
Fedoraproject Fedora	Version 31
Fedoraproject Fedora	Version 32

Configuration F

3 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 16.04
Canonical Ubuntu Linux	Version 18.04
Canonical Ubuntu Linux	Version 20.04

Configuration G

1 vulnerable · 4 platform

Vulnerable Software	Affected Versions
Redhat Software Collections	Version 1.0

Running on/with	Platform Versions
Redhat Enterprise Linux	Version 6.0
Redhat Enterprise Linux	Version 7.0
Redhat Enterprise Linux	Version 7.6
Redhat Enterprise Linux	Version 7.7

Configuration H

31 vulnerable

Vulnerable Software	Affected Versions
Redhat Enterprise Linux	Version 8.0
Redhat Enterprise Linux Eus	Version 8.1
Redhat Enterprise Linux Eus	Version 8.2
Redhat Enterprise Linux Eus	Version 8.4
Redhat Enterprise Linux Eus	Version 8.6
Redhat Enterprise Linux For Ibm Z Systems	Version 8.0
Redhat Enterprise Linux For Ibm Z Systems Eus	Version 8.1
Redhat Enterprise Linux For Ibm Z Systems Eus	Version 8.2
Redhat Enterprise Linux For Ibm Z Systems Eus	Version 8.4
Redhat Enterprise Linux For Ibm Z Systems Eus	Version 8.6
Redhat Enterprise Linux For Power Little Endian	Version 8.0
Redhat Enterprise Linux For Power Little Endian Eus	Version 8.1
Redhat Enterprise Linux For Power Little Endian Eus	Version 8.2
Redhat Enterprise Linux For Power Little Endian Eus	Version 8.4
Redhat Enterprise Linux For Power Little Endian Eus	Version 8.6
Redhat Enterprise Linux Server Aus	Version 8.2
Redhat Enterprise Linux Server Aus	Version 8.4
Redhat Enterprise Linux Server Aus	Version 8.6
Redhat Enterprise Linux Server For Power Little Endian Update Services For Sap Solutions	Version 8.1
Redhat Enterprise Linux Server For Power Little Endian Update Services For Sap Solutions	Version 8.2
Redhat Enterprise Linux Server For Power Little Endian Update Services For Sap Solutions	Version 8.4
Redhat Enterprise Linux Server For Power Little Endian Update Services For Sap Solutions	Version 8.6
Redhat Enterprise Linux Server Tus	Version 8.2
Redhat Enterprise Linux Server Tus	Version 8.4
Redhat Enterprise Linux Server Tus	Version 8.6
Redhat Enterprise Linux Server Update Services For Sap Solutions	Version 8.1
Redhat Enterprise Linux Server Update Services For Sap Solutions	Version 8.2
Redhat Enterprise Linux Server Update Services For Sap Solutions	Version 8.4
Redhat Enterprise Linux Server Update Services For Sap Solutions	Version 8.6
Redhat Openstack	Version 16.1
Redhat Openstack For Ibm Power	Version 16.1

Related CWEs

CWE-444

Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')

The product acts as an intermediary HTTP agent (such as a proxy or firewall) in the data flow between two entities such as a client and server, but it does not interpret malformed HTTP requests or responses in ways that are consistent with how the messages will be processed by those entities that are at the ultimate destination.

References (58)

http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00068.html

Source: security@apache.org

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00071.html

Source: security@apache.org

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00081.html

Source: security@apache.org

Mailing ListThird Party Advisory

http://packetstormsecurity.com/files/160392/Apache-2.4.43-mod_http2-Memory-Corruption.html

Source: security@apache.org

Third Party AdvisoryVDB Entry

https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2020-9490

Source: security@apache.org

Vendor Advisory

https://lists.apache.org/thread.html/r06f0d87ebb6d59ed8379633f36f72f5b1f79cadfda72ede0830b42cf%40%3Ccvs.httpd.apache.org%3E

Source: security@apache.org

https://lists.apache.org/thread.html/r09bb998baee74a2c316446bd1a41ae7f8d7049d09d9ff991471e8775%40%3Ccvs.httpd.apache.org%3E

Source: security@apache.org

https://lists.apache.org/thread.html/r0b6541c5fb2f8fb383861333400add7def625bc993300300de0b4f8d%40%3Ccvs.httpd.apache.org%3E

Source: security@apache.org

https://lists.apache.org/thread.html/r3c5c3104813c1c5508b55564b66546933079250a46ce50eee90b2e36%40%3Ccvs.httpd.apache.org%3E

Source: security@apache.org

https://lists.apache.org/thread.html/r5debe8f82728a00a4a68bc904dd6c35423bdfc8d601cfb4579f38bf1%40%3Cdev.httpd.apache.org%3E

Source: security@apache.org

https://lists.apache.org/thread.html/r623de9b2b2433a87f3f3a15900419fc9c00c77b26936dfea4060f672%40%3Cdev.httpd.apache.org%3E

Source: security@apache.org

https://lists.apache.org/thread.html/r76142b8c5119df2178be7c2dba88fde552eedeec37ea993dfce68d1d%40%3Ccvs.httpd.apache.org%3E

Source: security@apache.org

https://lists.apache.org/thread.html/r97d0faab6ed8fd0d439234b16d05d77b22a07b0c4817e7b3cca419cc%40%3Ccvs.httpd.apache.org%3E

Source: security@apache.org

https://lists.apache.org/thread.html/r9e485ce5a01c9dc3d4d785a7d28aa7400ead1e81884034ff1f03cfee%40%3Ccvs.httpd.apache.org%3E

Source: security@apache.org

https://lists.apache.org/thread.html/r9e9f1a7609760f0f80562eaaec2aa3c32d525c3e0fca98b475240c71%40%3Cdev.httpd.apache.org%3E

Source: security@apache.org

https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E

Source: security@apache.org

https://lists.apache.org/thread.html/ra4da876037477c06f2677d7a1e10b5a8613000fca99c813958070fe9%40%3Ccvs.httpd.apache.org%3E

Source: security@apache.org

https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E

Source: security@apache.org

https://lists.apache.org/thread.html/rdf3e5d0a5f5c3d90d6013bccc6c4d5af59cf1f8c8dea5d9a283d13ce%40%3Ccvs.httpd.apache.org%3E

Source: security@apache.org

https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E

Source: security@apache.org

https://lists.apache.org/thread.html/rfed9fea918e090383da33e393eb6c2755fccf05032bd7d6eb4737c9e%40%3Ccvs.httpd.apache.org%3E

Source: security@apache.org

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4NKWG2EXAQQB6LMLATKZ7KLSRGCSHVAN/

Source: security@apache.org

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ITVFDBVM6E3JF3O7RYLRPRCH3RDRHJJY/

Source: security@apache.org

https://security.gentoo.org/glsa/202008-04

Source: security@apache.org

Third Party Advisory

https://security.netapp.com/advisory/ntap-20200814-0005/

Source: security@apache.org

Third Party Advisory

https://usn.ubuntu.com/4458-1/

Source: security@apache.org

Third Party Advisory

https://www.debian.org/security/2020/dsa-4757

Source: security@apache.org

Third Party Advisory

https://www.oracle.com/security-alerts/cpujan2021.html

Source: security@apache.org

PatchThird Party Advisory

https://www.oracle.com/security-alerts/cpuoct2020.html

Source: security@apache.org

PatchThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00068.html