Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
gentooGentoo FoundationGLSA-201610-02
HistoryOct 06, 2016 - 12:00 a.m.

Apache: Multiple vulnerabilities

2016-10-0600:00:00
Gentoo Foundation
security.gentoo.org
26

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.072 Low

EPSS

Percentile

93.9%

JSON

Background

Apache HTTP Server is one of the most popular web servers on the Internet.

Description

Multiple vulnerabilities have been discovered in Apache HTTP Server. Please review the CVE identifiers referenced below for details.

Impact

Remote attackers could bypass intended access restrictions, conduct HTTP request smuggling attacks, or cause a Denial of Service condition.

Workaround

There is no known workaround at this time.

Resolution

All Apache users should upgrade to the latest version:

 # emerge --sync
 # emerge --ask --oneshot --verbose ">=www-servers/apache-2.4.23"
OSVersionArchitecturePackageVersionFilename
Gentooanyallwww-servers/apache< 2.4.23UNKNOWN

Related

nessus 50
fedora 5
ubuntucve 4
veracode 4
debiancve 4
openvas 35
httpd 5
redhatcve 1
freebsd 4
cve 4
f5 8
prion 4
redhat 11
ibm 34
oraclelinux 4
centos 3
osv 4
amazon 3
debian 6
ubuntu 1
mageia 2
securityvulns 2
slackware 1
nessus
nessus
GLSA-201610-02 : Apache: Multiple vulnerabilities
2016-10-07 00:00:00
Apache HTTP Server 2.4.x < 2.4.23 Multiple Vulnerabilities
2016-07-15 00:00:00
Fedora 24 : httpd (2016-c7288a5b36)
2016-07-15 00:00:00
fedora
fedora
[SECURITY] Fedora 24 Update: httpd-2.4.23-3.fc24
2016-07-12 15:09:51
[SECURITY] Fedora 23 Update: httpd-2.4.23-3.fc23
2016-07-15 10:24:34
[SECURITY] Fedora 21 Update: httpd-2.4.10-15.fc21
2015-03-16 01:41:46
ubuntucve
ubuntucve
CVE-2016-4979
2016-07-06 00:00:00
CVE-2014-3581
2014-10-10 00:00:00
CVE-2016-1546
2016-07-06 00:00:00
veracode
veracode
Authorization Bypass
2019-01-15 09:12:22
Denial Of Service (DoS)
2019-05-02 05:05:52
HTTP Request Smuggling
2019-01-15 09:07:33
debiancve
debiancve
CVE-2016-4979
2016-07-06 14:59:00
CVE-2014-3581
2014-10-10 10:55:00
CVE-2015-3183
2015-07-20 23:59:00
openvas
openvas
Fedora Update for httpd FEDORA-2016-e256a03791
2016-08-02 00:00:00
Apache HTTP Server Security Bypass Vulnerability (Jul 2016)
2016-07-08 00:00:00
Fedora Update for httpd FEDORA-2016-c7288a5b36
2016-08-02 00:00:00
httpd
httpd
Apache Httpd < 2.4.23 : TLS/SSL X.509 client certificate auth bypass with HTTP/2
2016-06-30 00:00:00
Apache Httpd < 2.4.12 : mod_cache crash with empty Content-Type header
2014-09-08 00:00:00
Apache Httpd < 2.4.20 : mod_http2: denial of service by thread starvation
2016-02-02 00:00:00
redhatcve
redhatcve
CVE-2016-4979
2016-07-06 14:18:35
freebsd
freebsd
apache24 -- X509 Client certificate based authentication can be bypassed when HTTP/2 is used
2016-07-01 00:00:00
apache22 -- chunk header parsing defect
2015-06-24 00:00:00
apache24 -- several vulnerabilities
2015-01-29 00:00:00
cve
cve
CVE-2016-4979
2016-07-06 14:59:00
CVE-2014-3581
2014-10-10 10:55:00
CVE-2015-3183
2015-07-20 23:59:00
f5
f5
SOL71436934 - Apache httpd vulnerability CVE-2016-4979
2016-07-18 00:00:00
K71436934 : Apache httpd vulnerability CVE-2016-4979
2016-07-18 00:00:00
K12254802 : Apache httpd HTTP/2 vulnerability CVE-2016-1546
2016-06-07 00:00:00
prion
prion
Authorization
2016-07-06 14:59:00
Null pointer dereference
2014-10-10 10:55:00
Design/Logic Flaw
2015-07-20 23:59:00
redhat
redhat
(RHSA-2015:2660) Moderate: Red Hat JBoss Web Server 3.0.2 security update
2015-12-16 18:09:36
(RHSA-2015:2659) Moderate: Red Hat JBoss Web Server 3.0.2 security update
2015-12-16 18:09:20
(RHSA-2015:1668) Moderate: httpd security update
2015-08-24 00:00:00
ibm
ibm
Security Bulletin: Security Vulnerability in IBM WebSphere Application Server shipped with IBM Tivoli Netcool Configuration Manager(CVE-2015-3183)
2019-01-22 16:30:15
Security Bulletin: A security vulnerability has been identified in IBM HTTP Server used by IBM WebSphere Application Server which is shipped with IBM PureApplication System (CVE-2015-3183)
2018-06-15 07:04:53
Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with WebSphere Business Modeler Publishing Server (CVE-2015-3183)
2018-06-15 07:03:38
oraclelinux
oraclelinux
httpd security update
2015-08-24 00:00:00
httpd security, bug fix, and enhancement update
2015-03-11 00:00:00
httpd security update
2015-08-24 00:00:00
centos
centos
httpd, mod_ssl security update
2015-08-24 18:23:20
httpd, mod_ldap, mod_proxy_html, mod_session, mod_ssl security update
2015-03-17 13:28:17
httpd, mod_ldap, mod_proxy_html, mod_session, mod_ssl security update
2015-08-25 16:08:42
osv
osv
apache2 - security update
2015-07-28 00:00:00
apache2 - security update
2014-10-16 00:00:00
apache2 - regression update
2015-08-01 00:00:00
amazon
amazon
Medium: httpd
2015-08-17 12:23:00
Low: httpd24
2015-02-12 10:57:00
Medium: httpd24
2015-08-17 12:27:00
debian
debian
[SECURITY] [DLA 284-1] apache2 security update
2015-07-28 21:31:48
[SECURITY] [DLA 71-1] apache2 security update
2014-10-16 10:10:29
[SECURITY] [DSA 3325-2] apache2 regression update
2015-08-18 11:39:08
ubuntu
ubuntu
Apache HTTP Server vulnerabilities
2015-07-27 00:00:00
mageia
mageia
Updated apache package fixes security vulnerabilities
2015-07-27 12:53:07
Updated apache packages fix security vulnerabilities
2014-12-13 23:16:05
securityvulns
securityvulns
Apache security vulnerabilities
2015-07-20 00:00:00
[slackware-security] httpd &#40;SSA:2015-198-01&#41;
2015-07-20 00:00:00
slackware
slackware
[slackware-security] httpd
2015-04-22 01:20:26

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.072 Low

EPSS

Percentile

93.9%

JSON
Related for GLSA-201610-02
nessus50fedora5ubuntucve4veracode4debiancve4openvas35httpd5redhatcve1freebsd4cve4f58prion4redhat11ibm34oraclelinux4centos3osv4amazon3debian6ubuntu1mageia2securityvulns2slackware1