Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale.
Voir CVE-2019-0220 →
DEBIAN-CVE-2019-0220
A vulnerability was found in Apache HTTP Server 2.4.0 to 2.4.38. When the path component of a request URL contains multiple consecutive slashes ('/'),...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
A vulnerability was found in Apache HTTP Server 2.4.0 to 2.4.38. When the path component of a request URL contains multiple consecutive slashes ('/'), directives such as LocationMatch and RewriteRule must account for duplicates in regular expressions while other aspects of the servers processing will implicitly collapse them.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Paquets affectés
Debian:12
apache2
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.38-3"}]}]
Debian:13
apache2
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.38-3"}]}]
Debian:14
apache2
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.38-3"}]}]
Références
- advisory security-tracker.debian.org