5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.006 Low
EPSS
Percentile
75.3%
Red Hat Ceph Storage is a massively scalable, open, software-defined
storage platform that combines the most stable version of the Ceph storage
system with a Ceph management platform, deployment tools, and support
services.
The mod_proxy_fcgi package provides a proxy module for the Apache 2.2 HTTP
server.
A buffer overflow flaw was found in mod_proxy_fcgi’s handle_headers()
function. A malicious FastCGI server that httpd is configured to connect to
could send a carefully crafted response that would cause an httpd child
process handling the request to crash. (CVE-2014-3583)
All mod_proxy_fcgi users are advised to upgrade to this updated package,
which corrects this issue.
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
RedHat | 6 | src | mod_proxy_fcgi | < 2.4.10-5.20150415gitd45a11f.el6cp | mod_proxy_fcgi-2.4.10-5.20150415gitd45a11f.el6cp.src.rpm |
RedHat | 6 | x86_64 | mod_proxy_fcgi | < 2.4.10-5.20150415gitd45a11f.el6cp | mod_proxy_fcgi-2.4.10-5.20150415gitd45a11f.el6cp.x86_64.rpm |
RedHat | 6 | x86_64 | mod_proxy_fcgi-debuginfo | < 2.4.10-5.20150415gitd45a11f.el6cp | mod_proxy_fcgi-debuginfo-2.4.10-5.20150415gitd45a11f.el6cp.x86_64.rpm |