Red Hat Security AdvisoryRHSA-2014:0370
httpd security update
Released 2014-04-03 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) httpd-2.2.15-30.el6_5, httpd-tools-2.2.15-30.el6_5
- Red Hat Enterprise Linux Desktop Optional (v. 6) httpd-2.2.15-30.el6_5, httpd-devel-2.2.15-30.el6_5, httpd-manual-2.2.15-30.el6_5 +1
- Red Hat Enterprise Linux HPC Node (v. 6) httpd-2.2.15-30.el6_5, httpd-tools-2.2.15-30.el6_5
- Red Hat Enterprise Linux HPC Node Optional (v. 6) httpd-2.2.15-30.el6_5, httpd-devel-2.2.15-30.el6_5, httpd-manual-2.2.15-30.el6_5 +1
- Red Hat Enterprise Linux Server (v. 6) httpd-2.2.15-30.el6_5, httpd-devel-2.2.15-30.el6_5, httpd-devel-2.2.15-30.el6_5.ppc +3
- Red Hat Enterprise Linux Workstation (v. 6) httpd-2.2.15-30.el6_5, httpd-devel-2.2.15-30.el6_5, httpd-manual-2.2.15-30.el6_5 +2
Fixes 2 records
Priority MEDIUM 45
The log_cookie function in mod_log_config.c in the mod_log_config module in the Apache HTTP Server before 2.4.8 allows remote attackers to cause a denial of service (segmentation fault and daemon crash) via a crafted coo…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.2665 · Published 2014-03-18 · Partial fix
Priority MEDIUM 45
The dav_xml_get_cdata function in main/util.c in the mod_dav module in the Apache HTTP Server before 2.4.8 does not properly remove whitespace characters from CDATA sections, which allows remote attackers to cause a deni…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.27499 · Published 2014-03-18 · Partial fix
