Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×
Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Loading...
Explore Latest Linux Security advisories
We found -6 articles for you...
198
security advisorydenial of servicehigh severityArchLinux: 201901-14 High: Apache Denial Of Service Issues
The package apache before version 2.4.38-1 is vulnerable to multiple issues including denial of service and insufficient validation. . Arch Linux Security Advisory ASA-201901-14 ========================================= Severity: High Date : 2019-01-24 CVE-ID : CVE-2018-17189 CVE-2018-17199 CVE-2019-0190 Package : apache Type : multiple issues Remote : Yes Link : https://security.archlinux.org/AVG-857 Summary ====== The package apache before version 2.4.38-1 is vulnerable to multiple issues including denial of service and insufficient validation. Resolution ========= Upgrade to 2.4.38-1. # pacman -Syu "apache> =2.4.38-1" The problems have been fixed upstream in version 2.4.38. Workaround ========= - CVE-2018-17189 Disable the h2 protocol. Description ========== - CVE-2018-17189 (denial of service) By sending request bodies in a slow loris way to plain resources, the h2 stream of Apache HTTP Server before 2.4.38 for that request unnecessarily occupied a server thread cleaning up that incoming data. This affects only HTTP/2 connections. A possible mitigation is to not enable the h2 protocol. - CVE-2018-17199 (insufficient validation) In Apache HTTP Server 2.4 release 2.4.37 and prior, mod_session checks the session expiry time before decoding the session. This causes session expiry time to be ignored for mod_session_cookie sessions since the expiry time is loaded when the session is decoded. - CVE-2019-0190 (denial of service) A bug exists in the way mod_ssl handled client renegotiations. A remote attacker could send a carefully crafted request that would cause mod_ssl to enter a loop leading to a denial of service. This bug can be only triggered with Apache HTTP Server version 2.4.37 when using OpenSSL version 1.1.1 or later, due to an interaction in changes to handling of renegotiation attempts. Impact ===== An attacker is able to crash the Apache server by sending maliciously- crafted h2 requests and SSL handshakes. In addition, an attacker is able to reuse an expiredsession. References ========= https://httpd.apache.org/security/vulnerabilities_24.html#2.4.38 https://security.archlinux.org/CVE-2018-17189 https://security.archlinux.org/CVE-2018-17199 https://security.archlinux.org/CVE-2019-0190 . Critical Notice: Apache Vulnerability in Arch Linux Detected; Immediate Upgrade Required to Address Potential Denial of Service Threats and Weak Validation Protocols.. Arch Linux Advisory, High Severity, Apache Security Fix. . LinuxSecurity.com Team
Jan 27, 2019
ArchLinux
198
security advisorydenial of servicemedium severityArch Linux: ASA-201804-4 Moderate: Apache Access Issues and DoS
The package apache before version 2.4.33-1 is vulnerable to multiple issues including session hijacking, access restriction bypass, content spoofing and denial of service. . Arch Linux Security Advisory ASA-201804-4 ======================================== Severity: Medium Date : 2018-04-04 CVE-ID : CVE-2017-15710 CVE-2017-15715 CVE-2018-1283 CVE-2018-1301 CVE-2018-1302 CVE-2018-1303 CVE-2018-1312 Package : apache Type : multiple issues Remote : Yes Link : https://security.archlinux.org/AVG-664 Summary ====== The package apache before version 2.4.33-1 is vulnerable to multiple issues including session hijacking, access restriction bypass, content spoofing and denial of service. Resolution ========= Upgrade to 2.4.33-1. # pacman -Syu "apache> =2.4.33-1" The problems have been fixed upstream in version 2.4.33. Workaround ========= None. Description ========== - CVE-2017-15710 (denial of service) In Apache httpd 2.0.23 to 2.0.65, 2.2.0 to 2.2.34, and 2.4.0 to 2.4.29, mod_authnz_ldap, if configured with AuthLDAPCharsetConfig, uses the Accept-Language header value to lookup the right charset encoding when verifying the user's credentials. If the header value is not present in the charset conversion table, a fallback mechanism is used to truncate it to a two characters value to allow a quick retry (for example, 'en-US' is truncated to 'en'). A header value of less than two charactersforces an out of bound write of one NUL byte to a memory location that is not part of the string. In the worst case, quite unlikely, the process would crash which could be used as a Denial of Service attack. In the more likely case, this memory is already reserved for future use and the issue has no effect at all. - CVE-2017-15715 (access restriction bypass) In Apache httpd 2.4.0 before 2.4.30, the expression specified in could match '$' to a newline character in a malicious filename, rather than matching only the end of the filename. This could be exploited in environments where uploads of some files areexternally blocked, but only by matching the trailing portion of the filename. - CVE-2018-1283 (session hijacking) In Apache httpd 2.2.0 before 2.4.30, when mod_session is configured to forward its session data to CGI applications (SessionEnv on, not the default), a remote user may influence their content by using a "Session" header. This comes from the "HTTP_SESSION" variable name used by mod_session to forward its data to CGIs, since the prefix "HTTP_" is also used by the Apache HTTP Server to pass HTTP header fields, per CGI specifications. - CVE-2018-1301 (denial of service) A specially crafted request could have crashed the Apache HTTP Server prior to version 2.4.30, due to an out of bound access after a size limit is reached by reading the HTTP header. This vulnerability is considered very hard if not impossible to trigger in non-debug mode (both log and build level), so it is classified as low risk for common server usage. - CVE-2018-1302 (denial of service) When an HTTP/2 stream was destroyed after being handled, the Apache HTTP Server prior to version 2.4.30 could have written a NULL pointer potentially to an already freed memory. The memory pools maintained by the server make this vulnerability hard to trigger in usual configurations, the reporter and the team could not reproduce it outside debug builds, so it is classified as low risk. - CVE-2018-1303 (denial of service) A specially crafted HTTP request header could have crashed the Apache HTTP Server prior to version 2.4.30 due to an out of bound read while preparing data to be cached in shared memory. It could be used as a Denial of Service attack against users of mod_cache_socache. - CVE-2018-1312 (content spoofing) In Apache httpd 2.2.0 before 2.4.30, when generating an HTTP Digest authentication challenge, the nonce sent to prevent reply attacks was not correctly generated using a pseudo-random seed. In a cluster of servers using a common Digest authentication configuration, HTTP requests could be replayed across servers by an attackerwithout detection. Impact ===== A remote attacker is able to crash a server, hijack a user session, upload arbitrary files or spoof requests by providing a crafted request. References ========= https://httpd.apache.org/security/vulnerabilities_24.html https://security.archlinux.org/CVE-2017-15710 https://security.archlinux.org/CVE-2017-15715 https://security.archlinux.org/CVE-2018-1283 https://security.archlinux.org/CVE-2018-1301 https://security.archlinux.org/CVE-2018-1302 https://security.archlinux.org/CVE-2018-1303 https://security.archlinux.org/CVE-2018-1312 . Enhance the apache package to address several vulnerabilities highlighted in the Arch Linux advisory ASA-201804-4.. Apache Issues, Arch Linux Security, Session Hijacking Fix. . Severity: Medium. LinuxSecurity.com Team
Apr 12, 2018
•Medium
ArchLinux
198
security advisorydenial of servicemedium severityArch Linux: ASA-201507-15 Medium: Apache Remote Denial Of Service
The package apache before version 2.4.16-1 is vulnerable to multiple issues including remote denial of service and authentication bypass. . Arch Linux Security Advisory ASA-201507-15 ========================================= Severity: Medium Date : 2015-07-17 CVE-ID : CVE-2015-0228 CVE-2015-0253 CVE-2015-3183 CVE-2015-3185 Package : apache Type : multiple issues Remote : Yes Link : https://wiki.archlinux.org/title/CVE Summary ====== The package apache before version 2.4.16-1 is vulnerable to multiple issues including remote denial of service and authentication bypass. Resolution ========= Upgrade to 2.4.16-1. # pacman -Syu "apache> =2.4.16-1" The problem has been fixed upstream in version 2.4.16. Workaround ========= None. Description ========== - CVE-2015-0228 (denial of service): mod_lua: A maliciously crafted websockets PING after a script calls r:wsupgrade() can cause a child process crash. - CVE-2015-0253 (denial of service): Fix a crash with ErrorDocument 400 pointing to a local URL-path with the INCLUDES filter active, introduced in 2.4.11. PR 57531. - CVE-2015-3183 (denial of service): core: Fix chunk header parsing defect. Remove apr_brigade_flatten(), buffering and duplicated code from the HTTP_IN filter, parse chunks in a single pass with zero copy. Limit accepted chunk-size to 2^63-1 and be strict about chunk-ext authorized characters. - CVE-2015-3185 (authentication bypass): Replacement of ap_some_auth_required (unusable in Apache httpd 2.4) with new ap_some_authn_required and ap_force_authn hook. Impact ===== A remote attacker might be able to bypass authentication required by a module incorrectly updated for 2.4.x, or crash the apache httpdserver. References ========= https://access.redhat.com/security/cve/CVE-2015-0228 https://access.redhat.com/security/cve/CVE-2015-0253 https://access.redhat.com/security/cve/CVE-2015-3183 https://access.redhat.com/security/cve/CVE-2015-3185 https://bz.apache.org/bugzilla/show_bug.cgi?id=57531 . Arch Linux Security Advisory ASA-202204-03 reports of moderate risk vulnerabilities in nginx, including potential service interruptions.. apache Security, Arch Linux, Remote Attack Risks. . Severity: Medium. LinuxSecurity.com Team
Jul 17, 2015
•Medium
ArchLinux
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!