Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Buy Us a Coffee

CVE-2020-9490

Quick assessment

Affected

n/a Apache HTTP Server

Exploitation

High exploitation probability; assess promptly

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Apache HTTP Server是美国阿帕奇软件（Apache Software）基金会的一款开源网页服务器。该服务器具有快速、可靠且可通过简单的API进行扩充的特点。 Apache HTTP Server 2.4.20版本至2.4.43版本中存在安全漏洞，攻击者可借助‘Cache-Digest’标头中带有特制值的HTTP/2请求利用该漏洞造成Push Diary崩溃。

AI Predicted 7.5 Difficulty: Easy EPSS 88.84% · P100 Updated Feb 24, 2026

Possible ATT&CK Techniques 1 AI

T1499.004 · Application or System Exploitation

Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2020-9490

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

N/A

Source: CVE Program / CVE List V5

Vulnerability Description

Apache HTTP Server versions 2.4.20 to 2.4.43. A specially crafted value for the 'Cache-Digest' header in a HTTP/2 request would result in a crash when the server actually tries to HTTP/2 PUSH a resource afterwards. Configuring the HTTP/2 feature via "H2Push off" will mitigate this vulnerability for unpatched servers.

Source: CVE Program / CVE List V5

CVSS Information

N/A

Source: CVE Program / CVE List V5

Vulnerability Type

N/A

Source: CVE Program / CVE List V5

Vulnerability Title

Apache HTTP Server 环境问题漏洞

Source: CNNVD (China National Vulnerability Database)

Vulnerability Description

Source: CNNVD (China National Vulnerability Database)

CVSS Information

N/A

Source: CNNVD (China National Vulnerability Database)

Vulnerability Type

N/A

Source: CNNVD (China National Vulnerability Database)

Shenlong Deep Dive — AI Deep Analysis

10-question deep dive: root cause, exploitation, mitigation, urgency. Read summary free, full version requires login.

Read summary Full analysis (login)

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
-	Apache HTTP Server	2.4.20 to 2.4.43	-

II. Public POCs for CVE-2020-9490

#	POC Description	Source Link	Shenlong Link

AI-Generated POC Premium

No public POC found.

III. Intelligence Information for CVE-2020-9490

请登录查看更多情报信息。

Vendor Advisories for CVE-2020-9490 (7)

https://security.netapp.com/advisory/ntap-20200814-0005/ x_refsource_CONFIRM
https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2020-9490 x_refsource_MISC
https://www.oracle.com/security-alerts/cpujan2021.html x_refsource_MISC
https://www.oracle.com/security-alerts/cpuoct2020.html x_refsource_MISC
https://www.debian.org/security/2020/dsa-4757 vendor-advisory x_refsource_DEBIAN
https://usn.ubuntu.com/4458-1/ vendor-advisory x_refsource_UBUNTU
https://security.gentoo.org/glsa/202008-04 vendor-advisory x_refsource_GENTOO

Exploits & Public PoCs for CVE-2020-9490 (1)

Packet Storm x_refsource_MISC

Mailing List Discussions for CVE-2020-9490 (21)

http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00071.html vendor-advisory x_refsource_SUSE
http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00081.html vendor-advisory x_refsource_SUSE
http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00068.html vendor-advisory x_refsource_SUSE
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ITVFDBVM6E3JF3O7RYLRPRCH3RDRHJJY/ vendor-advisory x_refsource_FEDORA
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4NKWG2EXAQQB6LMLATKZ7KLSRGCSHVAN/ vendor-advisory x_refsource_FEDORA
https://lists.apache.org/thread.html/r9e9f1a7609760f0f80562eaaec2aa3c32d525c3e0fca98b475240c71%40%3Cdev.httpd.apache.org%3E mailing-list x_refsource_MLIST
https://lists.apache.org/thread.html/r09bb998baee74a2c316446bd1a41ae7f8d7049d09d9ff991471e8775%40%3Ccvs.httpd.apache.org%3E mailing-list x_refsource_MLIST
https://lists.apache.org/thread.html/r0b6541c5fb2f8fb383861333400add7def625bc993300300de0b4f8d%40%3Ccvs.httpd.apache.org%3E mailing-list x_refsource_MLIST
https://lists.apache.org/thread.html/r97d0faab6ed8fd0d439234b16d05d77b22a07b0c4817e7b3cca419cc%40%3Ccvs.httpd.apache.org%3E mailing-list x_refsource_MLIST
🔗 svn commit: r1073143 [3/3] - in /websites/staging/httpd/trunk/content: ./ security/-Apache Mail Archives Read full article mailing-list x_refsource_MLIST
https://lists.apache.org/thread.html/r5debe8f82728a00a4a68bc904dd6c35423bdfc8d601cfb4579f38bf1%40%3Cdev.httpd.apache.org%3E mailing-list x_refsource_MLIST
https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E mailing-list x_refsource_MLIST
https://lists.apache.org/thread.html/rdf3e5d0a5f5c3d90d6013bccc6c4d5af59cf1f8c8dea5d9a283d13ce%40%3Ccvs.httpd.apache.org%3E mailing-list x_refsource_MLIST
https://lists.apache.org/thread.html/rfed9fea918e090383da33e393eb6c2755fccf05032bd7d6eb4737c9e%40%3Ccvs.httpd.apache.org%3E mailing-list x_refsource_MLIST
https://lists.apache.org/thread.html/r623de9b2b2433a87f3f3a15900419fc9c00c77b26936dfea4060f672%40%3Cdev.httpd.apache.org%3E mailing-list x_refsource_MLIST
https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E mailing-list x_refsource_MLIST
https://lists.apache.org/thread.html/ra4da876037477c06f2677d7a1e10b5a8613000fca99c813958070fe9%40%3Ccvs.httpd.apache.org%3E mailing-list x_refsource_MLIST
https://lists.apache.org/thread.html/r3c5c3104813c1c5508b55564b66546933079250a46ce50eee90b2e36%40%3Ccvs.httpd.apache.org%3E mailing-list x_refsource_MLIST
https://lists.apache.org/thread.html/r9e485ce5a01c9dc3d4d785a7d28aa7400ead1e81884034ff1f03cfee%40%3Ccvs.httpd.apache.org%3E mailing-list x_refsource_MLIST
https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E mailing-list x_refsource_MLIST
🔗 svn commit: r1075470 [4/4] - in /websites/staging/httpd/trunk/content: ./ security/json/CVE-2020-13938.json security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html-Apache Mail Archives Read full article mailing-list x_refsource_MLIST

https://www.cve.org/CVERecord?id=CVE-2020-9490

Same Patch Batch · n/a · 2020-08-07 · 25 CVEs total

CVE-2020-15054		TP-Link USB Network Server TL-PS310U 安全漏洞
CVE-2020-15065		Assmann Electronic DIGITUS DA-70254 4-Port Gigabit Network Hub 输入验证错误漏洞
CVE-2020-15064		Assmann Electronic DIGITUS DA-70254 4-Port Gigabit Network Hub 跨站脚本漏洞
CVE-2020-15063		Assmann Electronic DIGITUS DA-70254 4-Port Gigabit Network Hub 授权问题漏洞
CVE-2020-15062		Assmann Electronic DIGITUS DA-70254 4-Port Gigabit Network Hub 安全漏洞
CVE-2020-15061		Lindy 42633 4-Port USB 2.0 Gigabit Network Server 输入验证错误漏洞
CVE-2020-15060		Lindy 42633 4-Port USB 2.0 Gigabit Network Server 跨站脚本漏洞
CVE-2020-15059		Lindy 42633 4-Port USB 2.0 Gigabit Network Server 授权问题漏洞
CVE-2020-15058		Lindy 42633 4-Port USB 2.0 Gigabit Network Server 安全漏洞
CVE-2020-15057		TP-Link USB Network Server TL-PS310U 输入验证错误漏洞
CVE-2020-15056		TP-Link USB Network Server TL-PS310U 跨站脚本漏洞
CVE-2020-15055		TP-Link USB Network Server TL-PS310U 授权问题漏洞
CVE-2020-16168		多款Roboteam Home产品访问控制错误漏洞
CVE-2020-15480		PassMark Software BurnInTest、OSForensics和PerformanceTest 缓冲区错误漏洞
CVE-2020-15479		PassMark Software BurnInTest、OSForensics和PerformanceTest 缓冲区错误漏洞
CVE-2020-17352		Sophos XG Firewall 操作系统命令注入漏洞
CVE-2020-15907		Mahara 跨站脚本漏洞
CVE-2020-16167		多款Roboteam Home产品访问控制错误漏洞
CVE-2020-16169		多款Roboteam Home产品授权问题漏洞
CVE-2020-13376		SecurEnvoy SecureMail 路径遍历漏洞

Showing top 20 of 25 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: Apache HTTP Server

Same vendor: n/a

V. Comments for CVE-2020-9490

No comments yet

Goal Reached Thanks to every supporter — we hit 100%!

CVE-2020-9490

Quick assessment

Possible ATT&CK Techniques 1 AI

I. Basic Information for CVE-2020-9490

Vulnerability Information

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Shenlong Deep Dive — AI Deep Analysis

Affected Products

II. Public POCs for CVE-2020-9490

III. Intelligence Information for CVE-2020-9490

Vendor Advisories for CVE-2020-9490 (7)

Exploits & Public PoCs for CVE-2020-9490 (1)

Mailing List Discussions for CVE-2020-9490 (21)

Same Patch Batch · n/a · 2020-08-07 · 25 CVEs total

IV. Related Vulnerabilities

V. Comments for CVE-2020-9490

Leave a comment