Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale. Voir CVE-2020-35452 →

DEBIAN-CVE-2020-35452

Apache HTTP Server versions 2.4.0 to 2.4.46 A specially crafted Digest nonce can cause a stack overflow in mod_auth_digest. There is no report of this...

Description d'origine

La description telle que publiée par la source (souvent en anglais).

Apache HTTP Server versions 2.4.0 to 2.4.46 A specially crafted Digest nonce can cause a stack overflow in mod_auth_digest. There is no report of this overflow being exploitable, nor the Apache HTTP Server team could create one, though some particular compiler and/or compilation option might make it possible, with limited consequences anyway due to the size (a single byte) and the value (zero byte) of the overflow

Source: OSV.dev (Open Source Vulnerabilities) OSV

Paquets affectés

Debian:12 apache2

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.46-6"}]}]

Debian:13 apache2

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.46-6"}]}]

Debian:14 apache2

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.46-6"}]}]

Références

advisory security-tracker.debian.org