Popis
Multiple vulnerabilities were found in Apache HTTP Server. Malicious users can exploit these vulnerabilities to cause denial of service, bypass security restrictions, obtain sensitive information.
Below is a complete list of vulnerabilities:
- Out of bounds read vulnerability in mod_cache_socache can be exploited to cause denial of service.
- Security bypass vulnerability in mod_auth_digest can be exploited to bypass security restrictions.
- Use after free vulnerability on HTTP/2 stream shutdown can be exploited to cause denial of service.
- Out of bound access vulnerability in HTTP request can be exploited via special crafted request to cause denial of service.
- Out of bounds write vulnerability in mod_authnz_ldap can be exploited to cause denial of service.
- Security bypass vulnerability in filename can be exploited to bypass security restrictions.
- Information disclosure vulnerability in „Session“ header can be exploited remotely to obtain sensitive information.
Oficiální doporučení
Vykořisťování
Public exploits exist for this vulnerability.
Související produkty
seznam CVE
- CVE-2018-1303 critical
- CVE-2018-1312 critical
- CVE-2018-1302 high
- CVE-2018-1301 high
- CVE-2017-15710 critical
- CVE-2017-15715 critical
- CVE-2018-1283 high
Zobrazit více
Zjistěte statistiky zranitelností šířících se ve vaší oblasti statistics.securelist.com
Našli jste v popisu této chyby zabezpečení nepřesnost? Dej nám vědět!