Lucene search

K
freebsdFreeBSD5804B9D4-A959-11E4-9363-20CF30E32F6D
HistoryJan 29, 2015 - 12:00 a.m.

apache24 -- several vulnerabilities

2015-01-2900:00:00
vuxml.freebsd.org
16

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

0.467 Medium

EPSS

Percentile

97.4%

Apache HTTP SERVER PROJECT reports:

mod_proxy_fcgi: Fix a potential crash due to buffer over-read,
with response headersโ€™ size above 8K.
mod_cache: Avoid a crash when Content-Type has an empty value. PR 56924.
mod_lua: Fix handling of the Require line when a LuaAuthzProvider is used
in multiple Require directives with different arguments. PR57204.
core: HTTP trailers could be used to replace HTTP headers late during
request processing, potentially undoing or otherwise confusing modules
that examined or modified request headers earlier. Adds โ€œMergeTrailersโ€
directive to restore legacy behavior.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchapache24<ย 2.4.12UNKNOWN

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

0.467 Medium

EPSS

Percentile

97.4%