Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 542
Alerts This Week
Warning Icon 1 542

Ubuntu 16.04 ESM USN-5942-2 Moderate: Apache HTTP Server Remote Access

ubuntu
Calendar Grey March 22, 2023
Scroller Ubuntu
A critical security patch for the Apache HTTP Server has been released as part of Ubuntu Security Notice USN-5942-2, addressing a significant vulnerability related to network access.
Apache HTTP Server could allow unintended access to network services.

Summary

Apache HTTP Server could allow unintended access to network services.

Software Description:

- apache2: Apache HTTP server

Details:

USN-5942-1 fixed vulnerabilities in Apache HTTP Server. This update

provides the corresponding update for CVE-2023-25690 for Ubuntu 16.04 ESM.

Original advisory details:

Lars Krapf discovered that the Apache HTTP Server mod_proxy module

incorrectly handled certain configurations. A remote attacker could

possibly use this issue to perform an HTTP Request Smuggling attack.

(CVE-2023-25690)

Topics%20covered

Topics Covered

security advisory remote access Ubuntu network access apache2

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 16.04 ESM:
   apache2                         2.4.18-2ubuntu3.17+esm10

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-5942-2

https://ubuntu.com/security/notices/USN-5942-1

CVE-2023-25690

Severity
important
Lowest
Low
Medium
High
Critical

March 22, 2023

Topics%20covered

Topics Covered

security advisory remote access Ubuntu network access apache2

Package Information

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.