Lucene search

K
altlinuxHttps://packages.altlinux.org/en/sisyphus/security/A8010CB05EEA6E8B728C75063CB3AFD9
HistoryJan 25, 2019 - 12:00 a.m.

Security fix for the ALT Linux 10 package apache2 version 1:2.4.38-alt1

2019-01-2500:00:00
https://packages.altlinux.org/en/sisyphus/security/
packages.altlinux.org
7

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.013 Low

EPSS

Percentile

83.6%

Jan. 25, 2019 Anton Farygin 1:2.4.38-alt1

- 2.4.38
- fixes:
   * important: mod_ssl 2.4.37 remote DoS when used with OpenSSL 1.1.1. CVE-2019-0190
   * low: mod_session_cookie does not respect expiry time. CVE-2018-17199
   * low: DoS for HTTP/2 connections via slow request bodies. CVE-2018-17189

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.013 Low

EPSS

Percentile

83.6%