Red Hat Security AdvisoryRHSA-2019:0980
httpd:2.4 security update
Released 2019-05-07 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 8) httpd-2.4.37-11.module+el8.0.0+2969+90015743.aarch64::httpd:2.4, httpd-2.4.37-11.module+el8.0.0+2969+90015743.ppc64le::httpd:2.4, httpd-2.4.37-11.module+el8.0.0+2969+90015743.s390x::httpd:2.4 +37
Fixes 2 records
Priority CRITICAL 93KEV
In Apache HTTP Server 2.4 releases 2.4.17 to 2.4.38, with MPM event, worker or prefork, code executing in less-privileged child processes or threads (including scripts executed by an in-process scripting interpreter) cou…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.65005 · Published 2019-04-08 · Partial fix CWE-416
Priority MEDIUM 45
In Apache HTTP Server 2.4 releases 2.4.37 and 2.4.38, a bug in mod_ssl when using per-location client certificate verification with TLSv1.3 allowed a client to bypass configured access control restrictions.
CVSS 3.0HIGH 7.5· Network · Low privileges · No interaction · EPSS 0.10366 · Published 2019-04-08 · Fixed
