SUSE SLES12 Security Update : Recommended update for apache2 (SUSE-SU-2018:0261-1)

This update for apache2 fixes several issues. These security issues were fixed : - CVE-2017-9789: When under stress closing many connections the HTTP/2 handling code would sometimes access memory after it has been freed, resulting in potentially erratic behaviour bsc1048575. - CVE-2017-7659: A...

FakeImageExploiter - Use a Fake image.jpg (hide known file extensions) to exploit targets

This module takes one existing image.jpg and one payload.ps1 input by user and builds a new payload agent.jpg.exe that if executed it will trigger the download of the 2 previous files stored into apache2 image.jpg + payload.ps1 and execute them. This module also changes the agent.exe Icon to matc...

Debian: Security Advisory (DLA-862-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLES11 Security Update : apache2 (SUSE-SU-2017:2907-1) (Optionsbleed)

This update for apache2 fixes the following issues : - Allow disabling SNI on proxy connections using 'SetEnv proxy-disable-sni 1' in the configuration files. bsc1052830 - Allow ECDH again in modssl, it had been incorrectly disabled with the 2.2.34 update. bsc1064561 Following security issue has...

SUSE-SU-2017:2907-1 Security update for apache2

This update for apache2 fixes the following issues: - Allow disabling SNI on proxy connections using 'SetEnv proxy-disable-sni 1' in the configuration files. bsc1052830 - Allow ECDH again in modssl, it had been incorrectly disabled with the 2.2.34 update. bsc1064561 Following security issue has...

SUSE SLES12 Security Update : apache2 (SUSE-SU-2017:2756-1) (Optionsbleed)

This update for apache2 fixes several issues. These security issues were fixed : - CVE-2017-9798: Prevent use-after-free use of memory that allowed for an information leak via OPTIONS bsc1058058 - CVE-2017-9788: Uninitialized memory reflection in modauthdigest could have lead to leakage of...

SUSE-SU-2017:2756-1 Security update for apache2

This update for apache2 fixes several issues. These security issues were fixed: - CVE-2017-9798: Prevent use-after-free use of memory that allowed for an information leak via OPTIONS bsc1058058 - CVE-2017-9788: Uninitialized memory reflection in modauthdigest could have lead to leakage of...

SUSE SLES12 Security Update : apache2 (SUSE-SU-2017:2718-1) (Optionsbleed)

This update for apache2 fixes one issues. This security issue was fixed : - CVE-2017-9798: Prevent use-after-free use of memory that allowed for an information leak via OPTIONS bsc1058058 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE...

SUSE-SU-2017:2718-1 Security update for apache2

This update for apache2 fixes one issues. This security issue was fixed: - CVE-2017-9798: Prevent use-after-free use of memory that allowed for an information leak via OPTIONS bsc1058058...

Security fix for the ALT Linux 9 package apache2 version 1:2.4.28-alt1

Oct. 10, 2017 Anton Farygin 1:2.4.28-alt1 - new version 2.4.28 - disabled NameVirtualHost directive in portsall.conf closes: 32269 - increased timeout for restarting httpd on SysVinit sytems closes: 31062 - increased LOOPSSTART and TimeoutStartSec closes: 33978 - fixes: CVE-2017-9798 Corrupted or...

Security fix for the ALT Linux 10 package apache2 version 1:2.4.28-alt1

Oct. 10, 2017 Anton Farygin 1:2.4.28-alt1 - new version 2.4.28 - disabled NameVirtualHost directive in portsall.conf closes: 32269 - increased timeout for restarting httpd on SysVinit sytems closes: 31062 - increased LOOPSSTART and TimeoutStartSec closes: 33978 - fixes: CVE-2017-9798 Corrupted or...

Security fix for the ALT Linux 8 package apache2 version 1:2.4.28-alt1

Oct. 10, 2017 Anton Farygin 1:2.4.28-alt1 - new version 2.4.28 - disabled NameVirtualHost directive in portsall.conf closes: 32269 - increased timeout for restarting httpd on SysVinit sytems closes: 31062 - increased LOOPSSTART and TimeoutStartSec closes: 33978 - fixes: CVE-2017-9798 Corrupted or...

Debian DLA-1102-1 : apache2 security update (Optionsbleed)

Hanno Boeck discovered that incorrect parsing of Limit directives of .htaccess files by the Apache HTTP Server could result in memory disclosure. For Debian 7 'Wheezy', these problems have been fixed in version 2.2.22-13+deb7u12. We recommend that you upgrade your apache2 packages. NOTE: Tenable...

SUSE SLES12 Security Update : apache2 (SUSE-SU-2017:2542-1) (Optionsbleed)

This update for apache2 fixes the following security issue : - CVE-2017-9798: Prevent use-after-free use of memory that allowed for an information leak via OPTIONS bsc1058058. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory...

openSUSE Security Update : apache2 (openSUSE-2017-1083) (Optionsbleed)

This update for apache2 fixes the following security issue : - CVE-2017-9798: Prevent use-after-free use of memory that allowed for an information leak via OPTIONS bsc1058058. This update was imported from the SUSE:SLE-12-SP2:Update update project. %NASLMINLEVEL 70300 C Tenable Network Security,...

[SECURITY] [DLA 1102-1] apache2 security update

Package : apache2 Version : 2.2.22-13+deb7u12 CVE ID : CVE-2017-9798 Debian Bug : 876109 Hanno Boeck discovered that incorrect parsing of Limit directives of .htaccess files by the Apache HTTP Server could result in memory disclosure. For Debian 7 "Wheezy", these problems have been fixed in versi...

SUSE-SU-2017:2542-1 Security update for apache2

This update for apache2 fixes the following security issue: - CVE-2017-9798: Prevent use-after-free use of memory that allowed for an information leak via OPTIONS bsc1058058...

DLA-1102-1 apache2 - security update

Bulletin has no description...

Debian DSA-3980-1 : apache2 - security update (Optionsbleed)

Hanno Boeck discovered that incorrect parsing of Limit directives of .htaccess files by the Apache HTTP Server could result in memory disclosure. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisor...

[SECURITY] [DSA 3980-1] apache2 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3980-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso September 20, 2017 https://www.debian.org/security/faq -...