Red Hat Security AdvisoryRHSA-2015:1249
httpd security, bug fix, and enhancement update
Released 2015-07-20 · Red Hat rating Low · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) httpd-2.2.15-45.el6, httpd-tools-2.2.15-45.el6
- Red Hat Enterprise Linux Desktop Optional (v. 6) httpd-devel-2.2.15-45.el6, httpd-manual-2.2.15-45.el6, mod_ssl-1:2.2.15-45.el6
- Red Hat Enterprise Linux HPC Node (v. 6) httpd-2.2.15-45.el6, httpd-tools-2.2.15-45.el6
- Red Hat Enterprise Linux HPC Node Optional (v. 6) httpd-devel-2.2.15-45.el6, httpd-manual-2.2.15-45.el6, mod_ssl-1:2.2.15-45.el6
- Red Hat Enterprise Linux Server (v. 6) httpd-2.2.15-45.el6, httpd-devel-2.2.15-45.el6, httpd-devel-2.2.15-45.el6.ppc +3
- Red Hat Enterprise Linux Workstation (v. 6) httpd-2.2.15-45.el6, httpd-devel-2.2.15-45.el6, httpd-manual-2.2.15-45.el6 +2
Fixes 1 record
Priority MEDIUM 57
The mod_headers module in the Apache HTTP Server 2.2.22 allows remote attackers to bypass "RequestHeader unset" directives by placing a header in the trailer portion of data sent with chunked transfer coding.
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.57992 · Published 2014-04-15 · Partial fix
