Lucene search

K
altlinuxHttps://packages.altlinux.org/en/sisyphus/security/CB464A102C2B06580323D14B2A69C4B5
HistoryApr 03, 2019 - 12:00 a.m.

Security fix for the ALT Linux 8 package apache2 version 1:2.4.39-alt1

2019-04-0300:00:00
https://packages.altlinux.org/en/sisyphus/security/
packages.altlinux.org
15

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.975 High

EPSS

Percentile

99.9%

1:2.4.39-alt1 built April 3, 2019 Anton Farygin in task #226418

April 2, 2019 Anton Farygin

- 2.4.39
- fixes:
   * Apache HTTP Server privilege escalation from modules scripts. CVE-2019-0211
   * mod_auth_digest access control bypass. CVE-2019-0217
   * mod_ssl access control bypass. CVE-2019-0215
   * Apache httpd URL normalization inconsistincy. CVE-2019-0220

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.975 High

EPSS

Percentile

99.9%