HTTP/2 Bomb — Remote DoS Exploit Hits nginx, Apache, IIS, Envoy, and Cloudflare

[Starburst]

Would be useful either way to find out what mod_http2 the system is running.

[cyberspace]

I think the only way to find the version of mod_http2 is to check the log of the webserver:
/usr/local/apache/logs/error_log

Code Select Expand


grep 'mod_http2' /usr/local/apache/logs/error_log


[Starburst]

I think the only way to find the version of mod_http2 is to check the log of the webserver:
/usr/local/apache/logs/error_log

Code Select Expand


grep 'mod_http2' /usr/local/apache/logs/error_log


You da man @cyberspace...

Shows the version for both mod_http2 and nghttp2 

[6Sense]

Thanks for the apache update cheatsheet @Starburst

Perfect as usual & always appreciated