Wind River Support Network

HomeDefectsLIN1021-16804

Acknowledged

LIN1021-16804 : Security Advisory - apache2 - CVE-2025-49630

Created: Jul 11, 2025 Updated: Aug 11, 2025

Found In Version: 10.21.20.1

Severity: Standard

Applicable for: Wind River Linux LTS 21

Component/s: Userspace

Description

In certain proxy configurations, a denial of service attack againstÂ\xa0Apache HTTP Server versions 2.4.26 through to 2.4.63 can be triggered by untrusted clients causing an assertion in mod_proxy_http2.EOL][EOL]Configurations affected are a reverse proxy is configured for an HTTP/2 backend, with ProxyPreserveHost set to "on".

CREATE(Triage):(User=admin) [CVE-2025-49630 (https://nvd.nist.gov/vuln/detail/CVE-2025-49630)