(RHSA-2013:1156) Moderate: httpd security update

2013-08-1300:00:00

access.redhat.com

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

0.963 High

EPSS

Percentile

99.3%

JSON

The Apache HTTP Server is a popular web server.

A flaw was found in the way the mod_dav module of the Apache HTTP Server
handled merge requests. An attacker could use this flaw to send a crafted
merge request that contains URIs that are not configured for DAV, causing
the httpd child process to crash. (CVE-2013-1896)

All httpd users should upgrade to these updated packages, which contain a
backported patch to correct this issue. After installing the updated
packages, the httpd daemon will be restarted automatically.

OSVersionArchitecturePackageVersionFilename
RedHat5ia64httpd-devel< 2.2.3-82.el5_9httpd-devel-2.2.3-82.el5_9.ia64.rpm
RedHat5s390xmod_ssl< 2.2.3-82.el5_9mod_ssl-2.2.3-82.el5_9.s390x.rpm
RedHat6ppc64httpd-devel< 2.2.15-29.el6_4httpd-devel-2.2.15-29.el6_4.ppc64.rpm
RedHat5i386httpd-debuginfo< 2.2.3-82.el5_9httpd-debuginfo-2.2.3-82.el5_9.i386.rpm
RedHat6s390xhttpd-debuginfo< 2.2.15-29.el6_4httpd-debuginfo-2.2.15-29.el6_4.s390x.rpm
RedHat5x86_64httpd-devel< 2.2.3-82.el5_9httpd-devel-2.2.3-82.el5_9.x86_64.rpm
RedHat6i686httpd-tools< 2.2.15-29.el6_4httpd-tools-2.2.15-29.el6_4.i686.rpm
RedHat6ppc64httpd< 2.2.15-29.el6_4httpd-2.2.15-29.el6_4.ppc64.rpm
RedHat6x86_64httpd< 2.2.15-29.el6_4httpd-2.2.15-29.el6_4.x86_64.rpm
RedHat5s390xhttpd< 2.2.3-82.el5_9httpd-2.2.3-82.el5_9.s390x.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	5	ia64	httpd-devel	< 2.2.3-82.el5_9	httpd-devel-2.2.3-82.el5_9.ia64.rpm
RedHat	5	s390x	mod_ssl	< 2.2.3-82.el5_9	mod_ssl-2.2.3-82.el5_9.s390x.rpm
RedHat	6	ppc64	httpd-devel	< 2.2.15-29.el6_4	httpd-devel-2.2.15-29.el6_4.ppc64.rpm
RedHat	5	i386	httpd-debuginfo	< 2.2.3-82.el5_9	httpd-debuginfo-2.2.3-82.el5_9.i386.rpm
RedHat	6	s390x	httpd-debuginfo	< 2.2.15-29.el6_4	httpd-debuginfo-2.2.15-29.el6_4.s390x.rpm
RedHat	5	x86_64	httpd-devel	< 2.2.3-82.el5_9	httpd-devel-2.2.3-82.el5_9.x86_64.rpm
RedHat	6	i686	httpd-tools	< 2.2.15-29.el6_4	httpd-tools-2.2.15-29.el6_4.i686.rpm
RedHat	6	ppc64	httpd	< 2.2.15-29.el6_4	httpd-2.2.15-29.el6_4.ppc64.rpm
RedHat	6	x86_64	httpd	< 2.2.15-29.el6_4	httpd-2.2.15-29.el6_4.x86_64.rpm
RedHat	5	s390x	httpd	< 2.2.3-82.el5_9	httpd-2.2.3-82.el5_9.s390x.rpm