Lucene search

CVE-2016-5387

🗓️ 19 Jul 2016 02:19:00Reported by redhatType

cve🔗 web.nvd.nist.gov👁 1151 Views🌐 5 Media mentions

The Apache HTTP Server through 2.4.23 vulnerability allows remote attackers to redirect outbound traffic

Reporter	Title	Published	Views	Family All 157
Tenable Nessus	Oracle Linux 7 : httpd (ELSA-2016-1422)	19 Jul 201600:00	–	nessus
Tenable Nessus	CentOS 7 : httpd (CESA-2016:1422) (httpoxy)	19 Jul 201600:00	–	nessus
Tenable Nessus	Amazon Linux AMI : httpd24 / httpd (ALAS-2016-725) (httpoxy)	21 Jul 201600:00	–	nessus
Tenable Nessus	SUSE SLES12 Security Update : apache2 (SUSE-SU-2016:2090-1) (httpoxy)	2 Sep 201600:00	–	nessus
Tenable Nessus	Debian DLA-553-1 : apache2 security update (httpoxy)	21 Jul 201600:00	–	nessus
Tenable Nessus	RHEL 5 / 6 : httpd (RHSA-2016:1421) (httpoxy)	19 Jul 201600:00	–	nessus
Tenable Nessus	Oracle Linux 5 / 6 : httpd (ELSA-2016-1421)	19 Jul 201600:00	–	nessus
Tenable Nessus	Fedora 24 : httpd (2016-9fd9bfab9e) (httpoxy)	25 Jul 201600:00	–	nessus
Tenable Nessus	Scientific Linux Security Update : httpd on SL5.x, SL6.x i386/x86_64 (20160718) (httpoxy)	19 Jul 201600:00	–	nessus
Tenable Nessus	openSUSE Security Update : apache2 (openSUSE-2016-880) (httpoxy)	20 Jul 201600:00	–	nessus

Nvd

Node

apache http_serverRange2.2.0–2.2.31

apache http_serverRange2.4.1–2.4.23

Node

hp system_management_homepageRange≤7.5.5.0

Node

oracle communications_user_data_repositoryRange10.0.0–12.4

oracle enterprise_manager_ops_centerMatch12.2.2

oracle enterprise_manager_ops_centerMatch12.3.2

oracle linuxMatch5-

oracle linuxMatch6-

oracle linuxMatch7-

oracle solarisMatch11.3

Node

fedoraproject fedoraMatch23

fedoraproject fedoraMatch24

Node

redhat jboss_web_serverMatch2.1.0

AND

redhat enterprise_linuxMatch6.0

redhat enterprise_linuxMatch7.0

Node

redhat jboss_enterprise_web_serverMatch2.0.0

redhat jboss_enterprise_web_serverMatch3.0.0

AND

redhat enterprise_linuxMatch6.0

Node

redhat jboss_enterprise_web_serverMatch2.0.0

redhat jboss_enterprise_web_serverMatch3.0.0

AND

redhat enterprise_linuxMatch7.0

Node

redhat jboss_core_servicesMatch1.0

AND

redhat enterprise_linuxMatch6.0

redhat enterprise_linuxMatch7.0

Node

redhat enterprise_linux_desktopMatch6.0

redhat enterprise_linux_desktopMatch7.0

redhat enterprise_linux_eusMatch7.2

redhat enterprise_linux_eusMatch7.3

redhat enterprise_linux_eusMatch7.4

redhat enterprise_linux_eusMatch7.5

redhat enterprise_linux_eusMatch7.6

redhat enterprise_linux_eusMatch7.7

redhat enterprise_linux_serverMatch6.0

redhat enterprise_linux_serverMatch7.0

redhat enterprise_linux_server_ausMatch7.2

redhat enterprise_linux_server_ausMatch7.3

redhat enterprise_linux_server_ausMatch7.4

redhat enterprise_linux_server_ausMatch7.6

redhat enterprise_linux_server_ausMatch7.7

redhat enterprise_linux_server_tusMatch7.2

redhat enterprise_linux_server_tusMatch7.3

redhat enterprise_linux_server_tusMatch7.6

redhat enterprise_linux_server_tusMatch7.7

redhat enterprise_linux_workstationMatch6.0

redhat enterprise_linux_workstationMatch7.0

Node

debian debian_linuxMatch8.0

Node

canonical ubuntu_linuxMatch12.04-

canonical ubuntu_linuxMatch14.04esm

canonical ubuntu_linuxMatch15.10

canonical ubuntu_linuxMatch16.04esm

Node

opensuse leapMatch42.1

opensuse opensuseMatch13.2

Source	Link
rhn	www.rhn.redhat.com/errata/RHSA-2016-1648.html
access	www.access.redhat.com/errata/RHSA-2016:1851
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6WCTE7443AYZ4EGELWLVNANA2WJCJIYI/
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NEKZAB7MTWVSMORHTEMCQNFFMIHCYF76/
lists	www.lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E
securityfocus	www.securityfocus.com/bid/91816
access	www.access.redhat.com/errata/RHSA-2016:1422
oracle	www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html
lists	www.lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E
lists	www.lists.apache.org/thread.html/r04e89e873d54116a0635ef2f7061c15acc5ed27ef7500997beb65d6f%40%3Ccvs.httpd.apache.org%3E

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

19 Jul 2016 02:00Current

8.0High risk

Vulners AI Score8.0

CVSS26.8

CVSS38.1

EPSS0.176