Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale. Voir CVE-2018-8011 →

DEBIAN-CVE-2018-8011

By specially crafting HTTP requests, the mod_md challenge handler would dereference a NULL pointer and cause the child process to segfault. This could...

Description d'origine

La description telle que publiée par la source (souvent en anglais).

By specially crafting HTTP requests, the mod_md challenge handler would dereference a NULL pointer and cause the child process to segfault. This could be used to DoS the server. Fixed in Apache HTTP Server 2.4.34 (Affected 2.4.33).

Source: OSV.dev (Open Source Vulnerabilities) OSV

Paquets affectés

Debian:12 apache2

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.34-1"}]}]

Debian:13 apache2

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.34-1"}]}]

Debian:14 apache2

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.34-1"}]}]

Références

advisory security-tracker.debian.org