Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
oraclelinuxOracleLinuxELSA-2020-3958
HistoryOct 06, 2020 - 12:00 a.m.

httpd security, bug fix, and enhancement update

2020-10-0600:00:00
linux.oracle.com
170

8.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

JSON

[2.4.6-95.0.1]

  • replace index.html with Oracles index page oracle_index.html
    [2.4.6-95]
  • Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
    value
    [2.4.6-94]
  • Resolves: #1565491 - CVE-2017-15715 httpd:
    bypass with a trailing
    newline in the file name
  • Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
  • Resolves: #1724879 - httpd terminates all SSL connections using an abortive
    shutdown
  • Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
  • Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
    mod_cache_socache can allow a remote attacker to cause a denial of service
  • Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in
    mod_session can allow a remote user to modify session data for CGI applications
OSVersionArchitecturePackageVersionFilename
oracle linux7srchttpd< 2.4.6-95.0.1.el7httpd-2.4.6-95.0.1.el7.src.rpm
oracle linux7aarch64httpd< 2.4.6-95.0.1.el7httpd-2.4.6-95.0.1.el7.aarch64.rpm
oracle linux7aarch64httpd-devel< 2.4.6-95.0.1.el7httpd-devel-2.4.6-95.0.1.el7.aarch64.rpm
oracle linux7noarchhttpd-manual< 2.4.6-95.0.1.el7httpd-manual-2.4.6-95.0.1.el7.noarch.rpm
oracle linux7aarch64httpd-tools< 2.4.6-95.0.1.el7httpd-tools-2.4.6-95.0.1.el7.aarch64.rpm
oracle linux7aarch64mod_ldap< 2.4.6-95.0.1.el7mod_ldap-2.4.6-95.0.1.el7.aarch64.rpm
oracle linux7aarch64mod_proxy_html< 2.4.6-95.0.1.el7mod_proxy_html-2.4.6-95.0.1.el7.aarch64.rpm
oracle linux7aarch64mod_session< 2.4.6-95.0.1.el7mod_session-2.4.6-95.0.1.el7.aarch64.rpm
oracle linux7aarch64mod_ssl< 2.4.6-95.0.1.el7mod_ssl-2.4.6-95.0.1.el7.aarch64.rpm
oracle linux7srchttpd< 2.4.6-95.0.1.el7httpd-2.4.6-95.0.1.el7.src.rpm
Rows per page:
1-10 of 181

Related

nessus 58
redhat 2
centos 1
archlinux 2
freebsd 2
openvas 22
ibm 16
mageia 2
photon 2
altlinux 6
kaspersky 2
amazon 3
suse 3
fedora 5
debian 4
ubuntu 3
osv 9
checkpoint_advisories 2
redhatcve 6
f5 5
nuclei 2
alpinelinux 6
veracode 5
cve 5
ubuntucve 6
debiancve 6
prion 6
zdt 1
httpd 5
hackerone 1
rocky 1
nessus
nessus
RHEL 7 : httpd (RHSA-2020:3958)
2020-09-29 00:00:00
NewStart CGSL CORE 5.05 / MAIN 5.05 : httpd Multiple Vulnerabilities (NS-SA-2021-0159)
2021-10-27 00:00:00
Scientific Linux Security Update : httpd on SL7.x x86_64 (20201001)
2020-10-21 00:00:00
redhat
redhat
(RHSA-2020:3958) Moderate: httpd security, bug fix, and enhancement update
2020-09-29 07:46:42
(RHSA-2020:2263) Moderate: httpd24-httpd and httpd24-mod_md security and enhancement update
2020-05-26 07:28:44
centos
centos
httpd, mod_ldap, mod_proxy_html, mod_session, mod_ssl security update
2020-10-20 18:13:33
archlinux
archlinux
[ASA-202004-14] apache: multiple issues
2020-04-15 00:00:00
[ASA-201804-4] apache: multiple issues
2018-04-04 00:00:00
freebsd
freebsd
Apache -- Multiple vulnerabilities
2020-04-01 00:00:00
apache -- multiple vulnerabilities
2018-03-23 00:00:00
openvas
openvas
Huawei EulerOS: Security Advisory for httpd (EulerOS-SA-2020-1552)
2020-04-30 00:00:00
Huawei EulerOS: Security Advisory for httpd (EulerOS-SA-2020-1749)
2020-07-03 00:00:00
Huawei EulerOS: Security Advisory for httpd (EulerOS-SA-2020-1601)
2020-06-03 00:00:00
ibm
ibm
Security Bulletin: Vulnerabilities in Apache HTTP CVE-2019-10098 and CVE-2020-1927.
2021-09-22 23:38:15
Security Bulletin: Rational Build Forge Security Advisory for Apache HTTP Server (CVE-2020-1927, CVE-2020-1934)
2020-07-27 07:17:02
Security Bulletin: Multiple vulnerabilities have been identified in IBM WebSphere Application Server, which is shipped with, or a required product for, IBM Tivoli Network Manager (CVE-2020-1927, CVE-2020-1934)
2020-07-28 13:29:55
mageia
mageia
Updated apache packages fix security vulnerabilities
2020-04-15 13:12:14
Updated apache packages fix security vulnerabilities
2018-11-20 14:11:24
photon
photon
Moderate Photon OS Security Update - PHSA-2020-0079
2020-04-10 00:00:00
Moderate Photon OS Security Update - PHSA-2020-3.0-0079
2020-04-10 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 9 package apache2 version 1:2.4.43-alt1
2020-04-08 00:00:00
Security fix for the ALT Linux 8 package apache2 version 1:2.4.43-alt1
2020-04-09 00:00:00
Security fix for the ALT Linux 10 package apache2 version 1:2.4.43-alt1
2020-04-06 00:00:00
kaspersky
kaspersky
KLA12367 Multiple vulnerabilities in Apache HTTP Server
2020-04-01 00:00:00
KLA12361 Multiple vulnerabilities in Apache HTTP Server
2018-03-21 00:00:00
amazon
amazon
Low: httpd
2020-05-19 18:32:00
Low: httpd24
2020-05-22 20:57:00
Medium: httpd24
2018-05-03 16:29:00
suse
suse
Security update for apache2 (important)
2018-04-09 03:07:20
Security update for apache2 (important)
2018-04-05 21:09:45
Security update for apache2 (important)
2020-05-02 00:00:00
fedora
fedora
[SECURITY] Fedora 27 Update: httpd-2.4.33-2.fc27
2018-04-05 23:59:00
[SECURITY] Fedora 28 Update: httpd-2.4.33-2.fc28
2018-04-05 11:50:14
[SECURITY] Fedora 26 Update: httpd-2.4.33-4.fc26
2018-05-12 18:27:28
debian
debian
[SECURITY] [DSA 4164-1] apache2 security update
2018-04-03 16:02:15
[SECURITY] [DSA 4164-1] apache2 security update
2018-04-03 16:02:15
[SECURITY] [DSA 4757-1] apache2 security update
2020-08-31 15:10:58
ubuntu
ubuntu
Apache HTTP Server vulnerabilities
2018-04-30 00:00:00
Apache HTTP Server vulnerabilities
2018-04-19 00:00:00
Apache HTTP Server vulnerabilities
2020-08-13 00:00:00
osv
osv
apache2 - security update
2018-04-03 00:00:00
CVE-2019-10098
2019-09-25 17:15:10
CVE-2017-15715
2018-03-26 15:29:00
checkpoint_advisories
checkpoint_advisories
Apache httpd FilesMatch Directive Security Restriction Bypass (CVE-2017-15715)
2018-05-30 00:00:00
Apache httpd mod_cache_socache Denial of Service (CVE-2018-1303)
2018-05-27 00:00:00
redhatcve
redhatcve
CVE-2017-15715
2018-03-26 15:18:59
CVE-2019-10098
2019-08-21 05:22:33
CVE-2020-1934
2020-04-03 21:01:35
f5
f5
K27757011 : Apache HTTPD vulnerability CVE-2017-15715
2018-04-05 00:00:00
K25126370 : Apache HTTPD vulnerability CVE-2019-10098
2019-09-17 00:00:00
Apache mod_proxy_ftp vulnerability CVE-2020-1934
2021-03-10 19:35:00
nuclei
nuclei
Apache httpd <=2.4.29 - Arbitrary File Upload
2021-04-23 13:34:52
Apache HTTP server v2.4.0 to v2.4.39 - Open Redirect
2023-06-14 17:14:42
alpinelinux
alpinelinux
CVE-2017-15715
2018-03-26 15:29:00
CVE-2019-10098
2019-09-25 17:15:00
CVE-2020-1934
2020-04-01 20:15:00
veracode
veracode
Privilege Escalation
2019-05-16 03:21:40
Open Redirects
2020-05-27 03:19:07
Information Disclosure
2020-06-23 03:36:09
cve
cve
CVE-2017-15715
2018-03-26 15:29:00
CVE-2019-10098
2019-09-25 17:15:00
CVE-2020-1934
2020-04-01 20:15:00
ubuntucve
ubuntucve
CVE-2019-10098
2019-08-14 00:00:00
CVE-2017-15715
2018-03-26 00:00:00
CVE-2020-1934
2020-04-01 00:00:00
debiancve
debiancve
CVE-2019-10098
2019-09-25 17:15:00
CVE-2017-15715
2018-03-26 15:29:00
CVE-2020-1934
2020-04-01 20:15:00
prion
prion
Code injection
2019-09-25 17:15:00
Code injection
2018-03-26 15:29:00
Code injection
2020-04-01 20:15:00
zdt
zdt
Apache Httpd mod_rewrite - Open Redirects Vulnerability
2019-11-19 00:00:00
httpd
httpd
Apache Httpd < 2.4.33 : <FilesMatch> bypass with a trailing newline in the file name
2017-11-24 00:00:00
Apache Httpd < 2.4.41 : mod_rewrite potential open redirect
2019-03-26 00:00:00
Apache Httpd < 2.4.42 : mod_proxy_ftp use of uninitialized value
2020-01-03 00:00:00
hackerone
hackerone
Internet Bug Bounty: Use of uninitialized value in ftp_getrc_msg method of mod_proxy_ftp.c
2020-04-04 07:29:16
rocky
rocky
httpd:2.4 security, bug fix, and enhancement update
2020-11-03 12:33:02

8.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

JSON
Related for ELSA-2020-3958
nessus58redhat2centos1archlinux2freebsd2openvas22ibm16mageia2photon2altlinux6kaspersky2amazon3suse3fedora5debian4ubuntu3osv9checkpoint_advisories2redhatcve6f55nuclei2alpinelinux6veracode5cve5ubuntucve6debiancve6prion6zdt1httpd5hackerone1rocky1