[ASA-201807-12] apache: denial of service

🗓️ 20 Jul 2018 00:00:00Reported by ArchLinuxType

archlinux

archlinux🔗 security.archlinux.org👁 38 Views

CVE-2018-1333 and CVE-2018-8011 denial of service vulnerabilities in apache 2.4.34-

Reporter	Title	Published	Views	Family All 112
ALT Linux	Security fix for the ALT Linux 8 package apache2 version 1:2.4.34-alt1	31 Jul 201800:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 10 package apache2 version 1:2.4.34-alt1	31 Jul 201800:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 9 package apache2 version 1:2.4.34-alt1	31 Jul 201800:00	–	altlinux
IBM Security Bulletins	Security Bulletin: Vulnerabilities CVE-2018-1333 and CVE-2018-8011 in the IBM i HTTP Server affect IBM i.	8 Aug 201815:37	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Apache Tomcat, Open SSL, and Apache HTTPD affects Rational Build Forge	21 Nov 201822:55	–	ibm
FreeBSD	Apache httpd -- multiple vulnerabilities	18 Jul 201800:00	–	freebsd
Tenable Nessus	Amazon Linux 2 : httpd (ALAS-2018-1062)	24 Aug 201800:00	–	nessus
Tenable Nessus	Amazon Linux AMI : httpd24 (ALAS-2018-1062)	24 Aug 201800:00	–	nessus
Tenable Nessus	Apache 2.4.x < 2.4.34 Multiple Vulnerabilities	16 Aug 201800:00	–	nessus
Tenable Nessus	Fedora 28 : httpd (2018-49d3b42425)	3 Jan 201900:00	–	nessus

OS	OS Version	Architecture	Package	Package Version	Filename
Arch Linux	–	any	apache	2.4.34-1	apache-2.4.34-1-any.pkg.tar.zst

Source	Link
security	www.security.archlinux.org/AVG-736
httpd	www.httpd.apache.org/security/vulnerabilities_24.html
httpd	www.httpd.apache.org/security/vulnerabilities_24.html
security	www.security.archlinux.org/CVE-2018-1333
security	www.security.archlinux.org/CVE-2018-8011

20 Jul 2018 00:00Current

1.7Low risk

Vulners AI Score1.7

CVSS 25

CVSS 37.5

EPSS0.77835

apache web server denial of service http/2 http requests worker exhaustion mod_md challenge handler remote attack