Red Hat Security AdvisoryRHSA-2014:1972
httpd24-httpd security and bug fix update
Released 2014-12-09 · Red Hat rating Low · View on Red Hat →
Fixed in
- Red Hat Software Collections 1 for Red Hat Enterprise Linux Server (v. 6) httpd24-httpd-2.4.6-22.el6, httpd24-httpd-devel-2.4.6-22.el6, httpd24-httpd-manual-2.4.6-22.el6 +5
- Red Hat Software Collections 1 for Red Hat Enterprise Linux Server (v. 7) httpd24-httpd-2.4.6-25.el7, httpd24-httpd-devel-2.4.6-25.el7, httpd24-httpd-manual-2.4.6-25.el7 +5
- Red Hat Software Collections 1 for Red Hat Enterprise Linux Server EUS (v. 6.4) httpd24-httpd-2.4.6-22.el6, httpd24-httpd-devel-2.4.6-22.el6, httpd24-httpd-manual-2.4.6-22.el6 +5
- Red Hat Software Collections 1 for Red Hat Enterprise Linux Server EUS (v. 6.5) httpd24-httpd-2.4.6-22.el6, httpd24-httpd-devel-2.4.6-22.el6, httpd24-httpd-manual-2.4.6-22.el6 +5
- Red Hat Software Collections 1 for Red Hat Enterprise Linux Server EUS (v. 6.6) httpd24-httpd-2.4.6-22.el6, httpd24-httpd-devel-2.4.6-22.el6, httpd24-httpd-manual-2.4.6-22.el6 +5
- Red Hat Software Collections 1 for Red Hat Enterprise Linux Workstation (v. 6) httpd24-httpd-2.4.6-22.el6, httpd24-httpd-devel-2.4.6-22.el6, httpd24-httpd-manual-2.4.6-22.el6 +5
- Red Hat Software Collections 1 for Red Hat Enterprise Linux Workstation (v. 7) httpd24-httpd-2.4.6-25.el7, httpd24-httpd-devel-2.4.6-25.el7, httpd24-httpd-manual-2.4.6-25.el7 +5
Fixes 2 records
Priority MEDIUM 57
The mod_headers module in the Apache HTTP Server 2.2.22 allows remote attackers to bypass "RequestHeader unset" directives by placing a header in the trailer portion of data sent with chunked transfer coding.
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.57992 · Published 2014-04-15 · Partial fix
Priority LOW 38
The cache_merge_headers_out function in modules/cache/cache_util.c in the mod_cache module in the Apache HTTP Server before 2.4.11 allows remote attackers to cause a denial of service (NULL pointer dereference and applic…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.13451 · Published 2014-10-10 · Fixed CWE-476
