Skip to content
OpenAdvisories
High ELSA-2014-0921 5 CVEs

Important: httpd security update (Oracle Linux 7)

Published Jul 23, 2014 · Updated Jul 23, 2014

Ecosystem: Oracle Linux

Summary

[2.4.6-18.0.1.el7_0]
- replace index.html with Oracle's index page oracle_index.html

[2.4.6-18]
- mod_cgid: add security fix for CVE-2014-0231 (#1120607)
- mod_proxy: add security fix for CVE-2014-0117 (#1120607)
- mod_deflate: add security fix for CVE-2014-0118 (#1120607)
- mod_status: add security fix for CVE-2014-0226 (#1120607)
- mod_cache: add secutiry fix for CVE-2013-4352 (#1120607)

Fixed packages 8

ReleasePackageFixed in
Oracle Linux · 7 httpd 0:2.4.6-18.0.1.el7_0
Oracle Linux · 7 httpd-devel 0:2.4.6-18.0.1.el7_0
Oracle Linux · 7 httpd-manual 0:2.4.6-18.0.1.el7_0
Oracle Linux · 7 httpd-tools 0:2.4.6-18.0.1.el7_0
Oracle Linux · 7 mod_ldap 0:2.4.6-18.0.1.el7_0
Oracle Linux · 7 mod_proxy_html 1:2.4.6-18.0.1.el7_0
Oracle Linux · 7 mod_session 0:2.4.6-18.0.1.el7_0
Oracle Linux · 7 mod_ssl 1:2.4.6-18.0.1.el7_0

Vulnerabilities 5

  • Unscored —
    CVE-2013-4352 EPSS 12%

    The cache_invalidate function in modules/cache/cache_storage.c in the mod_cache module in the Apache HTTP Server 2.4.6,…

    apache2 Debian
  • Unscored —
    CVE-2014-0117 EPSS 36%

    The mod_proxy module in the Apache HTTP Server 2.4.x before 2.4.10, when a reverse proxy is enabled, allows remote atta…

    apache2 apache2 Debian Ubuntu
  • Unscored —
    CVE-2014-0118 EPSS 37%

    The deflate_in_filter function in mod_deflate.c in the mod_deflate module in the Apache HTTP Server before 2.4.10, when…

    apache2 apache2 Debian Ubuntu
  • Unscored —
    CVE-2014-0226 Public exploit EPSS 86%

    Race condition in the mod_status module in the Apache HTTP Server before 2.4.10 allows remote attackers to cause a deni…

    apache2 apache2 Debian Ubuntu
  • Unscored —
    CVE-2014-0231 EPSS 45%

    The mod_cgid module in the Apache HTTP Server before 2.4.10 does not have a timeout mechanism, which allows remote atta…

    apache2 apache2 Debian Ubuntu