The vulnerability of the mod_cache_socache module in the Apache HTTP Server, related to reading data beyond the buffer’s acceptable limit, allows attackers to cause service failures.

🗓️ 03 Dec 2019 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 1 Views

The Apache mod_cache_socache vulnerability allows reading beyond buffer boundaries, risking service interruptions.

Reporter	Title	Published	Views	Family All 133
ALT Linux	Security fix for the ALT Linux 8 package apache2 version 1:2.4.33-alt1	31 Mar 201800:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 9 package apache2 version 1:2.4.33-alt1	31 Mar 201800:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 10 package apache2 version 1:2.4.33-alt1	31 Mar 201800:00	–	altlinux
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM is vulnerable to using components with known vulnerabilities	27 Jan 202100:05	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM is vulnerable to using components with known vulnerabilities	27 Jan 202100:05	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in HTTPD affects IBM Integrated Analytics System	12 Nov 202005:57	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Apache HTTP Server affect Rational Build Forge (CVE-2018-1283, CVE-2018-1302, CVE-2018-1303, CVE-2018-1312, CVE-2017-15710, CVE-2017-15715, CVE-2018-1301)	20 Apr 202014:40	–	ibm
Amazon	Medium: httpd24	3 May 201800:00	–	amazon
Tenable Nessus	Amazon Linux AMI : httpd24 (ALAS-2018-1004)	4 May 201800:00	–	nessus
Tenable Nessus	Apache 2.4.x < 2.4.33 Multiple Vulnerabilities (deprecated)	30 Mar 201800:00	–	nessus

Vulners

Node

apache http_serverRange≤2.4.29

OR

canonical ubuntuMatch17.10

Source	Link
lists	www.lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba@%3Ccvs.
lists	www.lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830@%3Ccvs.
nvd	www.nvd.nist.gov/vuln/detail/CVE-2018-1303
security	www.security.netapp.com/advisory/ntap-20180601-0004/
security-tracker	www.security-tracker.debian.org/tracker/CVE-2018-1303
usn	www.usn.ubuntu.com/3627-1/
usn	www.usn.ubuntu.com/3627-2/
wiki	www.wiki.astralinux.ru/astra-linux-se16-bulletin-20210611SE16
wiki	www.wiki.astralinux.ru/pages/viewpage.action
debian	www.debian.org/security/2018/dsa-4164

19 Aug 2025 00:00Current

7.5High risk

Vulners AI Score7.5

CVSS 25

CVSS 35.3

EPSS0.34546

apache vulnerability mod cache socache buffer overread remote exploitation service disruption