Multiple vulnerabilities in Apache HTTP Server

Description

Multiple vulnerabilities were found in Apache HTTP Server. Malicious users can exploit these vulnerabilities to cause denial of service, spoof user interface.

Below is a complete list of vulnerabilities:

1. Use of uninitialized resource vulnerability in mod_proxy_ftp can be exploited via special FTP backend can be exploited to cause denial of service.
2. Security UI vulnerability in mod_rewrite can be exploited to spoof user interface.

Original advisories

• Fixed in Apache HTTP Server 2.4.42

Related products

• Apache-HTTP-Server

CVE list

• CVE-2020-1934
  high
• CVE-2020-1927
  high

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com