Test Kennung:	1.3.6.1.4.1.25623.1.0.148252
Kategorie:	Web Servers
Titel:	Apache HTTP Server < 2.4.54 Multiple Vulnerabilities - Linux
Zusammenfassung:	Apache HTTP Server is prone to multiple vulnerabilities.
Beschreibung:	Summary: Apache HTTP Server is prone to multiple vulnerabilities. Vulnerability Insight: The following vulnerabilities exist: - CVE-2022-26377: mod_proxy_ajp: Possible request smuggling - CVE-2022-28614: Read beyond bounds via ap_rwrite() - CVE-2022-28615: Read beyond bounds in ap_strcmp_match() - CVE-2022-29404: Denial of service in mod_lua r:parsebody - CVE-2022-30556: Information disclosure in mod_lua with websockets - CVE-2022-31813: mod_proxy X-Forwarded-For dropped by hop-by-hop mechanism Affected Software/OS: Apache HTTP Server version 2.4.53 and prior. Solution: Update to version 2.4.54 or later. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2022-26377 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7QUGG2QZWHTITMABFLVXA4DNYUOTPWYQ/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YPY2BLEVJWFH34AX77ZJPLD2OOBYR6ND/ https://security.gentoo.org/glsa/202208-20 https://httpd.apache.org/security/vulnerabilities_24.html http://www.openwall.com/lists/oss-security/2022/06/08/2 Common Vulnerability Exposure (CVE) ID: CVE-2022-28614 http://www.openwall.com/lists/oss-security/2022/06/08/4 Common Vulnerability Exposure (CVE) ID: CVE-2022-28615 http://www.openwall.com/lists/oss-security/2022/06/08/9 Common Vulnerability Exposure (CVE) ID: CVE-2022-29404 http://www.openwall.com/lists/oss-security/2022/06/08/5 Common Vulnerability Exposure (CVE) ID: CVE-2022-30556 http://www.openwall.com/lists/oss-security/2022/06/08/7 Common Vulnerability Exposure (CVE) ID: CVE-2022-31813 http://www.openwall.com/lists/oss-security/2022/06/08/8
Copyright	Copyright (C) 2022 Greenbone Networks GmbH

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.