Summary
David Shoon discovered that the Apache HTTP Server mod_macro module
incorrectly handled certain memory operations. A remote attacker could
possibly use this issue to cause the server to crash, resulting in a denial
of service.
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · Pro 14.04 LTS Pro:14.04:LTS | apache2 | 2.4.7-1ubuntu4.22+esm9 |
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | apache2 | 2.4.18-2ubuntu3.17+esm11 |
| Ubuntu · Pro 18.04 LTS Pro:18.04:LTS | apache2 | 2.4.29-1ubuntu4.27+esm1 |
Vulnerabilities 1
-
Unscored —
Apache HTTP Server: mod_macro buffer over-read
Out-of-bounds Read vulnerability in mod_macro of Apache HTTP Server.This issue affects Apache HTTP Server: through 2.4.57.
References
-
report
https://ubuntu.com/security/CVE-2023-31122