説明
Multiple vulnerabilities were found in Apache HTTP Server. Malicious users can exploit these vulnerabilities to cause denial of service, bypass security restrictions, obtain sensitive information.
Below is a complete list of vulnerabilities:
- Out of bounds read vulnerability in mod_cache_socache can be exploited to cause denial of service.
- Security bypass vulnerability in mod_auth_digest can be exploited to bypass security restrictions.
- Use after free vulnerability on HTTP/2 stream shutdown can be exploited to cause denial of service.
- Out of bound access vulnerability in HTTP request can be exploited via special crafted request to cause denial of service.
- Out of bounds write vulnerability in mod_authnz_ldap can be exploited to cause denial of service.
- Security bypass vulnerability in filename can be exploited to bypass security restrictions.
- Information disclosure vulnerability in “Session” header can be exploited remotely to obtain sensitive information.
オリジナルアドバイザリー
エクスプロイテーション
Public exploits exist for this vulnerability.
関連製品
CVEリスト
- CVE-2018-1303 critical
- CVE-2018-1312 critical
- CVE-2018-1302 high
- CVE-2018-1301 high
- CVE-2017-15710 critical
- CVE-2017-15715 critical
- CVE-2018-1283 high
も参照してください
お住まいの地域に広がる脆弱性の統計をご覧ください statistics.securelist.com
この脆弱性についての記述に不正確な点がありますか？ お知らせください！