USN-8369-2 libapache-mod-jk regression

USN-8369-1 fixed a vulnerability in modjk. It was discovered that for Ubuntu 18.04 LTS, during the update preparation phase, a previous fix for CVE-2023-41081 was incorrectly dropped. This update reintroduces the fix for CVE-2023-41081. We apologize for the inconvenience. Original advisory detail...

PT-2007-1473 · Apache · Mod Jk +1

Name of the Vulnerable Software and Affected Versions: Apache Tomcat version 5.5.15 Description: The issue is related to the AJP connector in Apache Tomcat, which uses an incorrect length for chunks. This can cause a buffer over-read in the ajp process callback function in mod jk, allowing remote...