Amazon Linux 2 — mod_http2 — multiple vulnerabilities (10 CVEs) — patch and remediation guide
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2-2024-2524 Related CVEs: CVE-2024-27316 CVE-2021-31618 CVE-2020-11993 CVE-2020-9490 CVE-2019-9511 CVE-2019-9516 CVE-2019-9517 CVE-2018-11763 +2 more Upstream summary: HTTP/2 incoming headers exceeding the limit are temporarily buffered in nghttp2 in order to generate […]