Unrated
A specially crafted HTTP request header could have crashed the Apache HTTP Server prior to version 2.4.30 due to an out of bound read while preparing...
CVE-2018-1303
First seen on SecPulse
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Alpine Linux ALPINE-CVE-2018-1303 apache2 Fixed in: 2.4.33-r0
- Debian DEBIAN-CVE-2018-1303 apache2 Fixed in: 2.4.33-1
Original description The description as published by the source.
A specially crafted HTTP request header could have crashed the Apache HTTP Server prior to version 2.4.30 due to an out of bound read while preparing data to be cached in shared memory. It could be used as a Denial of Service attack against users of mod_cache_socache. The vulnerability is considered as low risk since mod_cache_socache is not widely used, mod_cache_disk is not concerned by this vulnerability.
References
- advisory openwall.com
- advisory securityfocus.com
- advisory securitytracker.com
- advisory access.redhat.com
- advisory access.redhat.com
- advisory access.redhat.com
- advisory httpd.apache.org
- advisory security.netapp.com
- advisory support.hpe.com
- advisory usn.ubuntu.com
- advisory usn.ubuntu.com
- advisory debian.org
- web lists.apache.org
- web lists.apache.org
- web lists.apache.org
- web lists.apache.org
- web lists.apache.org
- web lists.apache.org
- web lists.apache.org
- web lists.apache.org
- web lists.apache.org
- web lists.apache.org
- web lists.apache.org
- web lists.apache.org
- web tenable.com