Red Hat Security Advisory

RHSA-2015:1855

mod_proxy_fcgi security update

Released 2015-10-01 · Red Hat rating Low · View on Red Hat →

Fixed in

Red Hat Common for RHEL Server (v. 6) mod_proxy_fcgi-2.4.10-5.20150415gitd45a11f.el6cp

Fixes 1 record

TI-2014-02907 CVE-2014-3583 · GHSA-jh98-gwvf-4vf3

The handle_headers function in mod_proxy_fcgi.c in the mod_proxy_fcgi module in the…

LOW 36

The handle_headers function in mod_proxy_fcgi.c in the mod_proxy_fcgi module in the Apache HTTP Server 2.4.10 allows remote FastCGI servers to cause a denial of service (buffer over-read and daemon crash) via long respon…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.10783 Published 2014-12-15 Partial fix CWE-119