Non évaluée
A specially crafted HTTP request header could have crashed the Apache HTTP Server prior to version 2.4.30 due to an out of bound read while preparing...
CVE-2018-1303
Première détection SecPulse
État des correctifs par distribution
Paquets corrigés publiés par chaque distribution pour cette CVE
- Alpine Linux ALPINE-CVE-2018-1303 apache2 Corrigé dans: 2.4.33-r0
- Debian DEBIAN-CVE-2018-1303 apache2 Corrigé dans: 2.4.33-1
Description d'origine La description telle que publiée par la source (souvent en anglais).
A specially crafted HTTP request header could have crashed the Apache HTTP Server prior to version 2.4.30 due to an out of bound read while preparing data to be cached in shared memory. It could be used as a Denial of Service attack against users of mod_cache_socache. The vulnerability is considered as low risk since mod_cache_socache is not widely used, mod_cache_disk is not concerned by this vulnerability.
Références
- advisory openwall.com
- advisory securityfocus.com
- advisory securitytracker.com
- advisory access.redhat.com
- advisory access.redhat.com
- advisory access.redhat.com
- advisory httpd.apache.org
- advisory security.netapp.com
- advisory support.hpe.com
- advisory usn.ubuntu.com
- advisory usn.ubuntu.com
- advisory debian.org
- web lists.apache.org
- web lists.apache.org
- web lists.apache.org
- web lists.apache.org
- web lists.apache.org
- web lists.apache.org
- web lists.apache.org
- web lists.apache.org
- web lists.apache.org
- web lists.apache.org
- web lists.apache.org
- web lists.apache.org
- web tenable.com