Lucene search
RootSSV:61874HistoryMar 20, 2014 - 12:00 a.m.
Apache HTTP Server多个拒绝服务漏洞
2014-03-2000:00:00
Root
www.seebug.org
920
0.247 Low
EPSS
Percentile
96.2%
BUGTRAQ ID: 66303
CVE ID: CVE-2013-6438,CVE-2014-0098
Apache HTTP Server是开源HTTP服务器。
Apache HTTP Server 2.4.7, 2.4.6, 2.4.4, 2.4.3, 2.4.2, 2.4.1在实现上存在安全漏洞，可被恶意利用造成拒绝服务。
1、记录截断cookie时，mod_log_config模块存在错误，可被利用造成工作线程崩溃。要成功利用此漏洞需要使用线程化MPM。
2、删除前导空格时，mod_dav模块存在边界错误，可被利用通过特制的DAV WRITE请求破坏内存。
0
Apache Group Apache HTTP Server < 2.4.9
目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：
http://httpd.apache.org/
Related
nessus
nessus
FreeBSD : apache -- several vulnerabilities (91ecb546-b1e6-11e3-980f-20cf30e32f6d)
2014-03-24 00:00:00
Slackware 14.0 / 14.1 / current : httpd (SSA:2014-086-02)
2014-03-31 00:00:00
openvas
openvas
RedHat Update for httpd RHSA-2014:0370-01
2014-04-08 00:00:00
CentOS Update for httpd CESA-2014:0370 centos6
2014-04-08 00:00:00
Oracle: Security Advisory (ELSA-2014-0370)
2015-10-06 00:00:00
kaspersky
kaspersky
KLA10067 DoS vulnerabilities in Apache httpd
2014-03-26 00:00:00
oraclelinux
oraclelinux
httpd security update
2014-04-03 00:00:00
httpd security update
2014-04-03 00:00:00
securityvulns
securityvulns
[ MDVSA-2014:065 ] apache
2014-03-24 00:00:00
Apache security vulnerabilities
2014-03-24 00:00:00
APPLE-SA-2014-10-16-1 OS X Yosemite v10.10
2014-10-18 00:00:00
mageia
mageia
Updated apache packages fix security vulnerabilities
2014-03-19 21:40:14
redhat
redhat
(RHSA-2014:0369) Moderate: httpd security update
2014-04-03 00:00:00
(RHSA-2014:0370) Moderate: httpd security update
2014-04-03 00:00:00
amazon
amazon
Medium: httpd
2014-04-25 16:00:00
Medium: httpd24
2014-03-24 23:33:00
fedora
fedora
[SECURITY] Fedora 19 Update: httpd-2.4.9-1.fc19
2014-04-23 04:33:29
[SECURITY] Fedora 20 Update: httpd-2.4.9-2.fc20
2014-03-31 02:16:57
centos
centos
httpd, mod_ssl security update
2014-04-04 00:04:54
httpd, mod_ssl security update
2014-04-04 00:08:57
ubuntu
ubuntu
Apache HTTP Server vulnerabilities
2014-03-24 00:00:00
threatpost
threatpost
Apache Update Resolves Security Vulnerabilities
2014-03-18 12:51:25
slackware
slackware
[slackware-security] httpd
2014-03-28 22:54:00
freebsd
freebsd
apache -- several vulnerabilities
2014-02-25 00:00:00
gentoo
gentoo
Apache HTTP Server: Multiple vulnerabilities
2014-08-29 00:00:00
suse
suse
Security update for apache2 (important)
2014-09-02 19:04:20
Security update for the Apache Web Server (important)
2014-08-07 01:04:17
Security update for apache2 (important)
2014-09-02 20:04:23
httpd
httpd
Apache Httpd < 2.4.9 : mod_dav crash
2013-12-10 00:00:00
Apache Httpd < 2.2.27 : mod_log_config crash
2014-02-25 00:00:00
Apache Httpd < 2.2.27 : mod_dav crash
2013-12-10 00:00:00
prion
prion
Cross site request forgery (csrf)
2014-03-18 05:18:00
Information disclosure
2014-03-18 05:18:00
checkpoint_advisories
checkpoint_advisories
Apache HTTP Server mod_log_config Denial of Service (CVE-2014-0098)
2014-04-02 00:00:00
cve
cve
CVE-2014-0098
2014-03-18 05:18:00
CVE-2013-6438
2014-03-18 05:18:00
debiancve
debiancve
CVE-2013-6438
2014-03-18 05:18:00
CVE-2014-0098
2014-03-18 05:18:00
ubuntucve
ubuntucve
CVE-2013-6438
2014-03-18 00:00:00
CVE-2014-0098
2014-03-18 00:00:00
f5
f5
K15300 : Apache HTTP Server mod_dav DoS vulnerability CVE-2013-6438
2014-12-12 00:00:00
SOL15300 - Apache HTTP Server mod_dav DoS vulnerability CVE-2013-6438
2014-06-02 00:00:00
K15320 : Apache vulnerability CVE-2014-0098
2014-12-12 00:00:00
veracode
veracode
Denial Of Service (Dos)
2019-01-15 08:54:20
Denial Of Service (DoS)
2019-05-02 04:58:46
hackerone
hackerone
Marktplaats: Multiple Apache 2.2.22 Vulnerabilities (XSS/ Code Exec/ DoS)
2015-06-09 17:47:58
U.S. Dept Of Defense: Out-of-date Version (Apache)
2016-11-24 15:09:27
osv
osv
apache2 - security update
2014-09-29 00:00:00
debian
debian
[SECURITY] [DLA 66-1] apache2 security update
2014-09-29 13:40:41
oracle
oracle
Oracle Critical Patch Update - July 2014
2014-07-15 00:00:00
Oracle Critical Patch Update Advisory - January 2015
2015-03-10 00:00:00