The vulnerability of the Apache HTTP Server web server, related to the occurrence of operations outside the buffer in memory, allows attackers to cause service interruptions.

🗓️ 03 Dec 2019 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 2 Views

Apache HTTP Server vulnerability allows remote attackers to disrupt service via buffer overread after header size limit.

Reporter	Title	Published	Views	Family All 152
ALT Linux	Security fix for the ALT Linux 8 package apache2 version 1:2.4.33-alt1	31 Mar 201800:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 9 package apache2 version 1:2.4.33-alt1	31 Mar 201800:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 10 package apache2 version 1:2.4.33-alt1	31 Mar 201800:00	–	altlinux
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities have been identified in IBM HTTP Server shipped with IBM Tivoli Security Policy Manager (CVE-2018-1301, CVE-2017-15715, CVE-2017-15710)	16 Jun 201822:06	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in the IBM HTTP Server bundled with IBM WebSphere Application Server Patterns and IBM WebSphere Application Server for Cloud (CVE-2017-15710, CVE-2017-15715, CVE-2018-1301)	15 Jun 201807:09	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in apache2 affect IBM BladeCenter Advanced Management Module (AMM)	3 Oct 201821:40	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in the IBM HTTP Server (CVE-2017-15710, CVE-2017-15715, CVE-2018-1301)	19 Feb 201917:50	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM HTTP Server affects Netezza Performance Portal	18 Oct 201903:36	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerabilities have been identified in IBM HTTP Server shipped with IBM Rational ClearQuest (CVE-2017-15710, CVE-2017-15715, CVE-2018-1301)	17 Jun 201805:28	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerabilities have been identified in IBM HTTP Server shipped with IBM Rational ClearCase (CVE-2017-15710, CVE-2017-15715, CVE-2018-1301)	10 Jul 201808:34	–	ibm

Vulners

Node

apache http_serverRange≤2.4.29

OR

canonical ubuntuMatch17.10

Source	Link
lists	www.lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba@%3Ccvs.
lists	www.lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830@%3Ccvs.
lists	www.lists.debian.org/debian-lts-announce/2018/05/msg00020.html
nvd	www.nvd.nist.gov/vuln/detail/CVE-2018-1301
security	www.security.netapp.com/advisory/ntap-20180601-0004/
security-tracker	www.security-tracker.debian.org/tracker/CVE-2018-1301
usn	www.usn.ubuntu.com/3627-1/
usn	www.usn.ubuntu.com/3627-2/
usn	www.usn.ubuntu.com/3937-2/
wiki	www.wiki.astralinux.ru/astra-linux-se16-bulletin-20210611SE16

19 Aug 2025 00:00Current

7.1High risk

Vulners AI Score7.1

CVSS 33.7

CVSS 24.3

EPSS0.15564

apache server buffer overread header size limit remote attacker service disruption