Red Hat Security AdvisoryRHSA-2015:1668
httpd security update
Released 2015-08-24 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) httpd-2.2.15-47.el6_7, httpd-tools-2.2.15-47.el6_7
- Red Hat Enterprise Linux Desktop Optional (v. 6) httpd-devel-2.2.15-47.el6_7, httpd-manual-2.2.15-47.el6_7, mod_ssl-1:2.2.15-47.el6_7
- Red Hat Enterprise Linux HPC Node (v. 6) httpd-2.2.15-47.el6_7, httpd-tools-2.2.15-47.el6_7
- Red Hat Enterprise Linux HPC Node Optional (v. 6) httpd-devel-2.2.15-47.el6_7, httpd-manual-2.2.15-47.el6_7, mod_ssl-1:2.2.15-47.el6_7
- Red Hat Enterprise Linux Server (v. 6) httpd-2.2.15-47.el6_7, httpd-devel-2.2.15-47.el6_7, httpd-devel-2.2.15-47.el6_7.ppc +3
- Red Hat Enterprise Linux Workstation (v. 6) httpd-2.2.15-47.el6_7, httpd-devel-2.2.15-47.el6_7, httpd-manual-2.2.15-47.el6_7 +2
Fixes 1 record
Priority MEDIUM 61
The chunked transfer coding implementation in the Apache HTTP Server before 2.4.14 does not properly parse chunk headers, which allows remote attackers to conduct HTTP request smuggling attacks via a crafted request, rel…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.74387 · Published 2015-07-20 · Partial fix CWE-17
