DeutschShown in its original language — a full translation is planned for a future version.
Apache HTTP Server: Mehrere Schwachstellen
view advisory published 2020-08-09
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Apache HTTP Server ausnutzen, um beliebigen Programmcode mit den Rechten des Dienstes auszuführen, seine Adresse zu spoofen, Informationen offenzulegen oder einen Denial of Service zu verursachen.
01
describes (4)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2020-9490US | high7.5 | — | ||
Apache HTTP Server versions 2.4.20 to 2.4.43. A specially crafted value for the 'Cache-Digest' header in a HTTP/2 request would result in a crash when the server actually tries to… | ||||
| CVE-2020-11993US | high7.5 | — | ||
Apache HTTP Server versions 2.4.20 to 2.4.43 When trace/debug was enabled for the HTTP/2 module and on certain traffic edge patterns, logging statements were made on the wrong conn… | ||||
| CVE-2020-11985US | medium5.3OT elevated | — | ||
IP address spoofing when proxying using mod_remoteip and mod_rewrite For configurations using proxying with mod_remoteip and certain mod_rewrite rules, an attacker could spoof thei… | ||||
| CVE-2020-11984US | critical9.8 | Exploit | ||
Apache HTTP server 2.4.32 to 2.4.44 mod_proxy_uwsgi info disclosure and possible RCE | ||||
02
references
External citations — patches, advisories, analysis.
- Oracle Linux Security Advisory ELSA-2022-0258 vom 2022-01-26external
- SUSE Security Update SUSE-SU-2020:2311-1 vom 2020-08-25external
- SUSE Security Update SUSE-SU-2020:2344-1 vom 2020-08-26external
- SUSE Security Update SUSE-SU-2020:3067-1 vom 2020-10-28external
- SUSE Security Update SUSE-SU-2020:2450-1 vom 2020-09-02external
- Apache Mailing List vom 2020-08-09external
- Apache Mailing List vom 2020-08-09external
- Apache Mailing List vom 2020-08-09external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan