Alerts This Week
Warning Icon 1 692
Alerts This Week
Warning Icon 1 692

Debian 11: DLA-3919-1 critical: libapache-mod-jk security

debian lts
Calendar Grey October 14, 2024
Dist Debian Esm H88
Problems in the libapache-mod-jk configuration might result in potential data leakage or denial of service. It is advised to apply the latest updates for enhanced security.
It was discovered that there was a configuration issue in libapache-mod-jk, an Apache web server module used to forward requests from Apache to Tomcat using the AJP protocol
Topics%20covered

Topics Covered

security advisory denial of service debian information disclosure libapache-mod-jk

Summary

An issue with incorrect default permissions could have allowed local
users to view and modify shared memory containing mod_jk's
configuration, which may have potentially led to information
disclosure and/or a denial of service attack.

For Debian 11 bullseye, this problem has been fixed in version
1:1.2.48-1+deb11u2.

We recommend that you upgrade your libapache-mod-jk packages.

For the detailed security status of libapache-mod-jk please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/source-package/libapache-mod-jk

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS



Severity
critical
Lowest
Low
Medium
High
Critical

Package: libapache-mod-jk
Version: 1:1.2.48-1+deb11u2
CVE ID: CVE-2024-46544
Debian Bug: 1082713

Topics%20covered

Topics Covered

security advisory denial of service debian information disclosure libapache-mod-jk

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here