DeutschShown in its original language — a full translation is planned for a future version.
Apache HTTP Server: Mehrere Schwachstellen
view advisory published 2023-01-17
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Apache HTTP Server ausnutzen, um einen Denial of Service Angriff durchzuführen und Sicherheitsmaßnahmen zu umgehen.
01
describes (3)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2022-37436US | medium5.3 | — | ||
Prior to Apache HTTP Server 2.4.55, a malicious backend can cause the response headers to be truncated early, resulting in some headers being incorporated into the response body. I… | ||||
| CVE-2022-36760US | critical9.0 | — | ||
Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server allows an attacker to smuggle requests to the AJP serve… | ||||
| CVE-2006-20001US | high7.5 | Exploit | ||
A carefully crafted If: request header can cause a memory read, or write of a single zero byte, in a pool (heap) memory location beyond the header value sent. This could cause the… | ||||
02
references
External citations — patches, advisories, analysis.
- Oracle Linux Security Advisory ELSA-2023-0852 vom 2023-02-22external
- Oracle Linux Security Advisory ELSA-2023-0970 vom 2023-02-28external
- Oracle Linux Security Advisory ELSA-2023-1673 vom 2023-04-07external
- Red Hat Security Advisory RHSA-2023:0852 vom 2023-02-21external
- Red Hat Security Advisory RHSA-2023:0970 vom 2023-02-28external
- Red Hat Security Advisory RHSA-2023:3354 vom 2023-06-05external
- Red Hat Security Advisory RHSA-2023:3355 vom 2023-06-05external
- Red Hat Security Advisory RHSA-2023:4628 vom 2023-08-15external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan