Red Hat Security AdvisoryRHSA-2019:3436
httpd:2.4 security and bug fix update
Released 2019-11-05 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 8) httpd-2.4.37-16.module+el8.1.0+4134+e6bad0ed.aarch64::httpd:2.4, httpd-2.4.37-16.module+el8.1.0+4134+e6bad0ed.ppc64le::httpd:2.4, httpd-2.4.37-16.module+el8.1.0+4134+e6bad0ed.s390x::httpd:2.4 +37
Fixes 2 records
Priority MEDIUM 49
In Apache HTTP Server 2.4 release 2.4.38 and prior, a race condition in mod_auth_digest when running in a threaded server could allow a user with valid credentials to authenticate using another username, bypassing config…
CVSS 3.1HIGH 7.5· Network · Low privileges · No interaction · EPSS 0.16355 · Published 2019-04-08 · Partial fix CWE-362
Priority MEDIUM 41
A vulnerability was found in Apache HTTP Server 2.4.0 to 2.4.38.
CVSS 3.0MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.1786 · Published 2019-06-11 · Partial fix CWE-706
