Red Hat Security AdvisoryRHSA-2013:1156
httpd security update
Released 2013-08-13 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) httpd-2.2.3-82.el5_9, httpd-2.2.3-82.el5_9.i386, httpd-2.2.3-82.el5_9.ia64 +13
- Red Hat Enterprise Linux Desktop (v. 6) httpd-2.2.15-29.el6_4, httpd-tools-2.2.15-29.el6_4
- Red Hat Enterprise Linux Desktop Optional (v. 6) httpd-2.2.15-29.el6_4, httpd-devel-2.2.15-29.el6_4, httpd-manual-2.2.15-29.el6_4 +1
- Red Hat Enterprise Linux HPC Node (v. 6) httpd-2.2.15-29.el6_4, httpd-tools-2.2.15-29.el6_4
- Red Hat Enterprise Linux HPC Node Optional (v. 6) httpd-2.2.15-29.el6_4, httpd-devel-2.2.15-29.el6_4, httpd-manual-2.2.15-29.el6_4 +1
- Red Hat Enterprise Linux Server (v. 6) httpd-2.2.15-29.el6_4, httpd-devel-2.2.15-29.el6_4, httpd-devel-2.2.15-29.el6_4.ppc +3
- Red Hat Enterprise Linux Workstation (v. 6) httpd-2.2.15-29.el6_4, httpd-devel-2.2.15-29.el6_4, httpd-manual-2.2.15-29.el6_4 +2
Fixes 1 record
Priority MEDIUM 43
mod_dav.c in the Apache HTTP Server before 2.2.25 does not properly determine whether DAV is enabled for a URI, which allows remote attackers to cause a denial of service (segmentation fault) via a MERGE request in which…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.29484 · Published 2013-07-10 · Partial fix
