Summary
Hanno Böck discovered that the Apache HTTP Server incorrectly handled
Limit directives in .htaccess files. In certain configurations, a remote
attacker could possibly use this issue to read arbitrary server memory,
including sensitive information. This issue is known as Optionsbleed.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | apache2 | 2.4.7-1ubuntu4.18 |
| Ubuntu · 16.04 LTS 16.04:LTS | apache2 | 2.4.18-2ubuntu3.5 |
Vulnerabilities 1
-
Unscored —
Apache httpd allows remote attackers to read secret data from process memory if the Limit directive can be set in a use…
References
-
report
https://ubuntu.com/security/CVE-2017-9798