Description
The date handling code in modules/proxy/proxy_util.c (mod_proxy) in Apache 2.3.0, when using a threaded MPM, allows remote origin servers to cause a denial of service (caching forward proxy process crash) via crafted date headers that trigger a buffer over-read.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | apache2 | 2.2.6-1 | — |
| Debian 13 | apache2 | 2.2.6-1 | — |
| Debian 12 | apache2 | 2.2.6-1 | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 5 | httpd +2 | 2.2.3-11.el5 | RHSA-2007:0746 |
| RHEL 5 | mod_ssl | 1:2.2.3-11.el5 | RHSA-2007:0746 |
| RHEL 4 | httpd +3 | 2.0.52-38.ent | RHSA-2007:0747 |
| RHEL 4 | mod_ssl | 1:2.0.52-38.ent | RHSA-2007:0747 |
| RHEL 3 | httpd +1 | 2.0.46-70.ent | RHSA-2008:0005 |
| RHEL 3 | mod_ssl | 1:2.0.46-70.ent | RHSA-2008:0005 |
Show 2 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat Rhel Application Stack 1 | httpd +2 | 2.0.59-1.el4s1.8 | RHSA-2007:0911 |
| Red Hat Rhel Application Stack 1 | mod_ssl | 1:2.0.59-1.el4s1.8 | RHSA-2007:0911 |
| Red Hat Certificate System 7 | ant | 1.6.5-1jpp_1rh | RHSA-2010:0602 |
| Red Hat Certificate System 7 | avalon-logkit | 1.2-2jpp_4rh | RHSA-2010:0602 |
| Red Hat Certificate System 7 | axis | 1.2.1-1jpp_3rh | RHSA-2010:0602 |
| Red Hat Certificate System 7 | classpathx-jaf | 1.0-2jpp_6rh | RHSA-2010:0602 |
| Red Hat Certificate System 7 | classpathx-mail | 1.1.1-2jpp_8rh | RHSA-2010:0602 |
| Red Hat Certificate System 7 | geronimo-specs +10 | 1.0-0.M4.1jpp_10rh | RHSA-2010:0602 |
| Red Hat Certificate System 7 | jakarta-commons-modeler | 2.0-3jpp_2rh | RHSA-2010:0602 |
| Red Hat Certificate System 7 | log4j | 1.2.12-1jpp_1rh | RHSA-2010:0602 |
| Red Hat Certificate System 7 | mx4j | 1:3.0.1-1jpp_4rh | RHSA-2010:0602 |
| Red Hat Certificate System 7 | pcsc-lite +2 | 1.3.3-3.el4 | RHSA-2010:0602 |
| Red Hat Certificate System 7 | rhpki-ca | 7.3.0-20.el4 | RHSA-2010:0602 |
| Red Hat Certificate System 7 | rhpki-java-tools | 7.3.0-10.el4 | RHSA-2010:0602 |
| Red Hat Certificate System 7 | rhpki-kra | 7.3.0-14.el4 | RHSA-2010:0602 |
| Red Hat Certificate System 7 | rhpki-manage | 7.3.0-19.el4 | RHSA-2010:0602 |
| Red Hat Certificate System 7 | rhpki-native-tools | 7.3.0-6.el4 | RHSA-2010:0602 |
| Red Hat Certificate System 7 | rhpki-tks +1 | 7.3.0-13.el4 | RHSA-2010:0602 |
| Red Hat Certificate System 7 | tomcat5 +5 | 5.5.23-0jpp_4rh.16 | RHSA-2010:0602 |
| Red Hat Certificate System 7 | xerces-j2 | 2.7.1-1jpp_1rh | RHSA-2010:0602 |
| Red Hat Certificate System 7 | xml-commons +1 | 1.3.02-2jpp_1rh | RHSA-2010:0602 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | apache2 | 2.4.49-1.1 | openSUSE-SU-2024:10623-1 |
Advisories 6
- RHSA-2010:0602 Red Hat Security Advisory: Red Hat Certificate System 7.3 security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2007:0746 Red Hat Security Advisory: httpd security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- RHSA-2008:0005 Red Hat Security Advisory: httpd security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- RHSA-2007:0747 Red Hat Security Advisory: httpd security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- openSUSE-SU-2024:10623-1 apache2-2.4.49-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- RHSA-2007:0911 Red Hat Security Advisory: httpd security update Red Hat Security Advisories (RHSA) · Jan 8, 2026
References
- 28606 third-party-advisory
- RHSA-2008:0005 vendor-advisory
- ADV-2007-3955 vdb-entry
- 28922 third-party-advisory
- oval:org.mitre.oval:def:10525 vdb-entry signature
- 28749 third-party-advisory
- PK52702 vendor-advisory
- HPSBUX02273 vendor-advisory
- 26952 third-party-advisory
- 26993 third-party-advisory
- SSA:2008-045-02 vendor-advisory
- 26636 third-party-advisory
- 27563 third-party-advisory
- 1018633 vdb-entry
- 27732 third-party-advisory
- 27209 third-party-advisory
- RHSA-2007:0911 vendor-advisory
- [apache-httpd-dev] 20070801 Re: svn commit: r561616 - in /httpd/httpd/trunk: CHANGES modules/proxy/proxy_util.c mailing-list
- http://www.oracle.com/technetwork/topics/security/cpujuly2013-1899826.html
- 26790 third-party-advisory
- [apache-httpd-dev] 20070801 Re: svn commit: r561616 - in /httpd/httpd/trunk: CHANGES modules/proxy/proxy_util.c mailing-list
- ADV-2008-0924 vdb-entry
- http://httpd.apache.org/security/vulnerabilities_20.html
- TA08-150A third-party-advisory
- SUSE-SA:2007:061 vendor-advisory
- FEDORA-2007-2214 vendor-advisory
- RHSA-2007:0747 vendor-advisory
- ADV-2007-3494 vdb-entry
- 29420 third-party-advisory
- http://httpd.apache.org/security/vulnerabilities_22.html
- https://issues.rpath.com/browse/RPL-1710
- APPLE-SA-2008-03-18 vendor-advisory
- 30430 third-party-advisory
- MDKSA-2007:235 vendor-advisory
- APPLE-SA-2008-05-28 vendor-advisory
- http://support.avaya.com/elmodocs2/security/ASA-2007-500.htm
- 20090821 VMSA-2009-0010 VMware Hosted products update libpng and Apache HTTP Server mailing-list
- 28467 third-party-advisory
- ADV-2008-0233 vdb-entry
- 26722 third-party-advisory
- http://www.fujitsu.com/global/support/software/security/products-f/interstage-200802e.html
- 27971 third-party-advisory
- [security-announce] 20090820 VMSA-2009-0010 VMware Hosted products update libpng and Apache HTTP Server mailing-list
- 27882 third-party-advisory
- GLSA-200711-06 vendor-advisory
- ADV-2007-3095 vdb-entry
- http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg27007951
- http://docs.info.apple.com/article.html?artnum=307562
- RHSA-2007:0746 vendor-advisory
- PK50469 vendor-advisory
- FEDORA-2007-707 vendor-advisory
- 27593 third-party-advisory
- ADV-2008-1697 vdb-entry
- USN-575-1 vendor-advisory
- 26842 third-party-advisory
- ADV-2007-3283 vdb-entry
- ADV-2007-3020 vdb-entry
- 25489 vdb-entry
- [apache-cvs] 20070801 svn commit: r561616 - in /httpd/httpd/trunk: CHANGES mailing-list
- http://bugs.gentoo.org/show_bug.cgi?id=186219