Every applicability statement published about this vulnerability, kept as each source wrote it rather than merged into one verdict. Where sources disagree, both positions are shown.
A statement that names no version covers the whole product, which is not the same as your version falling inside a range. Orderings marked best effort come from schemes with no published comparison algorithm; exact ones follow a published specification.
Precedence decides which claim wins when two sources describe the same product over the same version range. It is a property of the source, not of the claim, and changing it re-ranks the data without re-reading a single document.
| Product | Status | Versions | Remediation | Source | |
|---|---|---|---|---|---|
| AppStream-9.4.0.GA:mod_http2-0:2.0.26-1.el9.aarch64 mod_http2-0:2.0.26-1.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9) | fixed | mod_http2-0:2.0.26-1.el9.aarch64 | vendor fix → mod_http2-0:2.0.26-1.el9.aarch64 (RHSA-2024:2368) | csaf_redhat | |
| AppStream-9.4.0.GA:mod_http2-0:2.0.26-1.el9.ppc64le mod_http2-0:2.0.26-1.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9) | fixed | mod_http2-0:2.0.26-1.el9.ppc64le | vendor fix → mod_http2-0:2.0.26-1.el9.ppc64le (RHSA-2024:2368) | csaf_redhat | |
| AppStream-9.4.0.GA:mod_http2-0:2.0.26-1.el9.s390x mod_http2-0:2.0.26-1.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9) | fixed | mod_http2-0:2.0.26-1.el9.s390x | vendor fix → mod_http2-0:2.0.26-1.el9.s390x (RHSA-2024:2368) | csaf_redhat | |
| AppStream-9.4.0.GA:mod_http2-0:2.0.26-1.el9.src mod_http2-0:2.0.26-1.el9.src as a component of Red Hat Enterprise Linux AppStream (v. 9) | fixed | mod_http2-0:2.0.26-1.el9.src | vendor fix → mod_http2-0:2.0.26-1.el9.src (RHSA-2024:2368) | csaf_redhat | |
| AppStream-9.4.0.GA:mod_http2-0:2.0.26-1.el9.x86_64 mod_http2-0:2.0.26-1.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9) | fixed | mod_http2-0:2.0.26-1.el9.x86_64 | vendor fix → mod_http2-0:2.0.26-1.el9.x86_64 (RHSA-2024:2368) | csaf_redhat | |
| AppStream-9.4.0.GA:mod_http2-debuginfo-0:2.0.26-1.el9.aarch64 mod_http2-debuginfo-0:2.0.26-1.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9) | fixed | mod_http2-debuginfo-0:2.0.26-1.el9.aarch64 | vendor fix → mod_http2-debuginfo-0:2.0.26-1.el9.aarch64 (RHSA-2024:2368) | csaf_redhat | |
| AppStream-9.4.0.GA:mod_http2-debuginfo-0:2.0.26-1.el9.ppc64le mod_http2-debuginfo-0:2.0.26-1.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9) | fixed | mod_http2-debuginfo-0:2.0.26-1.el9.ppc64le | vendor fix → mod_http2-debuginfo-0:2.0.26-1.el9.ppc64le (RHSA-2024:2368) | csaf_redhat | |
| AppStream-9.4.0.GA:mod_http2-debuginfo-0:2.0.26-1.el9.s390x mod_http2-debuginfo-0:2.0.26-1.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9) | fixed | mod_http2-debuginfo-0:2.0.26-1.el9.s390x | vendor fix → mod_http2-debuginfo-0:2.0.26-1.el9.s390x (RHSA-2024:2368) | csaf_redhat | |
| AppStream-9.4.0.GA:mod_http2-debuginfo-0:2.0.26-1.el9.x86_64 mod_http2-debuginfo-0:2.0.26-1.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9) | fixed | mod_http2-debuginfo-0:2.0.26-1.el9.x86_64 | vendor fix → mod_http2-debuginfo-0:2.0.26-1.el9.x86_64 (RHSA-2024:2368) | csaf_redhat | |
| AppStream-9.4.0.GA:mod_http2-debugsource-0:2.0.26-1.el9.aarch64 mod_http2-debugsource-0:2.0.26-1.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9) | fixed | mod_http2-debugsource-0:2.0.26-1.el9.aarch64 | vendor fix → mod_http2-debugsource-0:2.0.26-1.el9.aarch64 (RHSA-2024:2368) | csaf_redhat | |
| AppStream-9.4.0.GA:mod_http2-debugsource-0:2.0.26-1.el9.ppc64le mod_http2-debugsource-0:2.0.26-1.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9) | fixed | mod_http2-debugsource-0:2.0.26-1.el9.ppc64le | vendor fix → mod_http2-debugsource-0:2.0.26-1.el9.ppc64le (RHSA-2024:2368) | csaf_redhat | |
| AppStream-9.4.0.GA:mod_http2-debugsource-0:2.0.26-1.el9.s390x mod_http2-debugsource-0:2.0.26-1.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9) | fixed | mod_http2-debugsource-0:2.0.26-1.el9.s390x | vendor fix → mod_http2-debugsource-0:2.0.26-1.el9.s390x (RHSA-2024:2368) | csaf_redhat | |
| AppStream-9.4.0.GA:mod_http2-debugsource-0:2.0.26-1.el9.x86_64 mod_http2-debugsource-0:2.0.26-1.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9) | fixed | mod_http2-debugsource-0:2.0.26-1.el9.x86_64 | vendor fix → mod_http2-debugsource-0:2.0.26-1.el9.x86_64 (RHSA-2024:2368) | csaf_redhat | |
| red_hat_enterprise_linux_8:mod_http2::httpd:2.4 mod_http2 (httpd:2.4) as a component of Red Hat Enterprise Linux 8 | not affected vulnerable code not present | mod_http2::httpd:2.4 | not applicable | csaf_redhat | |
| red_hat_enterprise_linux_8:mod_http2.src::httpd:2.4 mod_http2.src (httpd:2.4) as a component of Red Hat Enterprise Linux 8 | not affected vulnerable code not present | mod_http2.src::httpd:2.4 | not applicable | csaf_redhat | |
| red_hat_jboss_core_services:mod_http2.src mod_http2.src as a component of Red Hat JBoss Core Services | not affected vulnerable code not present | no version stated vendor label: mod_http2.src | not applicable | csaf_redhat | |
| apache | affected | >= 2.4.55, < 2.4.58 | vendor fix → 2.4.58 | osv BIT-apache-2023-43622 | |
| https://github.com/apache/httpd | affected | >= 8201e867f1d4cdf61840625c6c4be901e3f1b6ba, < c3ad18b7ee32da93eabaae7b94541d3c32264340 | vendor fix → c3ad18b7ee32da93eabaae7b94541d3c32264340 | osv | |
| apache | fixed | 2.4.58 | vendor fix → 2.4.58 | osv BIT-apache-2023-43622 | |
| https://github.com/apache/httpd | fixed | c3ad18b7ee32da93eabaae7b94541d3c32264340 | vendor fix → c3ad18b7ee32da93eabaae7b94541d3c32264340 | osv | |
| Apache Software Foundation/Apache HTTP Server Apache Software Foundation · Apache HTTP Server | affected | >= 2.4.55, <= 2.4.57 | none available | cve_cna |
A claim with no version range is shown as written rather than expanded: a government catalog naming only a vendor and product is a real statement at zero granularity, and inventing bounds for it would put precision in the record that the source never offered.