Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
oraclelinuxOracleLinuxELSA-2014-1972
HistoryFeb 04, 2016 - 12:00 a.m.

httpd24-httpd security and bug fix update

2016-02-0400:00:00
linux.oracle.com
98

EPSS

0.965

Percentile

99.6%

JSON

[2.4.6-22.0.1.el6]

  • remove enable-tlsv1x-thunks to fit openssl 1.x api
  • replace index.html with Oracleโ€™s index page oracle_index.html
  • update vstring in specfile
    [2.4.6-22]
  • Remove mod_proxy_fcgi fix for heap-based buffer overflow,
    httpd-2.4.6 is not affected (CVE-2014-3583)
    [2.4.6-21]
  • mod_proxy_wstunnel: Fix the use of SSL with the โ€˜wss:โ€™ scheme (#1141950)
    [2.4.6-20]
  • core: fix bypassing of mod_headers rules via chunked requests (CVE-2013-5704)
  • mod_cache: fix NULL pointer dereference on empty Content-Type (CVE-2014-3581)
  • mod_proxy_fcgi: fix heap-based buffer overflow (CVE-2014-3583)
    [2.4.6-19]
  • mod_cgid: add security fix for CVE-2014-0231
  • mod_proxy: add security fix for CVE-2014-0117
  • mod_deflate: add security fix for CVE-2014-0118
  • mod_status: add security fix for CVE-2014-0226
  • mod_cache: add secutiry fix for CVE-2013-4352
OSVersionArchitecturePackageVersionFilename
oracle linux6srchttpd24-httpd<ย 2.4.6-22.0.1.el6httpd24-httpd-2.4.6-22.0.1.el6.src.rpm
oracle linux6x86_64httpd24-httpd<ย 2.4.6-22.0.1.el6httpd24-httpd-2.4.6-22.0.1.el6.x86_64.rpm
oracle linux6x86_64httpd24-httpd-devel<ย 2.4.6-22.0.1.el6httpd24-httpd-devel-2.4.6-22.0.1.el6.x86_64.rpm
oracle linux6noarchhttpd24-httpd-manual<ย 2.4.6-22.0.1.el6httpd24-httpd-manual-2.4.6-22.0.1.el6.noarch.rpm
oracle linux6x86_64httpd24-httpd-tools<ย 2.4.6-22.0.1.el6httpd24-httpd-tools-2.4.6-22.0.1.el6.x86_64.rpm
oracle linux6x86_64httpd24-mod_ldap<ย 2.4.6-22.0.1.el6httpd24-mod_ldap-2.4.6-22.0.1.el6.x86_64.rpm
oracle linux6x86_64httpd24-mod_proxy_html<ย 2.4.6-22.0.1.el6httpd24-mod_proxy_html-2.4.6-22.0.1.el6.x86_64.rpm
oracle linux6x86_64httpd24-mod_session<ย 2.4.6-22.0.1.el6httpd24-mod_session-2.4.6-22.0.1.el6.x86_64.rpm
oracle linux6x86_64httpd24-mod_ssl<ย 2.4.6-22.0.1.el6httpd24-mod_ssl-2.4.6-22.0.1.el6.x86_64.rpm

Related

openvas 46
oraclelinux 4
nessus 62
redhat 14
centos 4
ibm 5
veracode 5
gentoo 1
hackerone 2
freebsd 3
securityvulns 4
fedora 4
mageia 3
slackware 2
ubuntu 2
amazon 4
debian 4
f5 5
osv 3
suse 3
httpd 4
cvelist 2
prion 3
seebug 1
debiancve 3
nvd 1
cve 2
ubuntucve 3
openvas
openvas
Oracle: Security Advisory (ELSA-2014-1972)
2016-02-05 00:00:00
Oracle: Security Advisory (ELSA-2014-0921)
2015-10-06 00:00:00
RedHat Update for httpd RHSA-2014:0921-01
2014-07-28 00:00:00
oraclelinux
oraclelinux
httpd security update
2014-07-23 00:00:00
httpd security update
2014-07-23 00:00:00
httpd security, bug fix, and enhancement update
2015-03-11 00:00:00
nessus
nessus
CentOS 7 : httpd (CESA-2014:0921)
2014-07-24 00:00:00
Oracle Linux 7 : httpd (ELSA-2014-0921)
2014-07-24 00:00:00
RHEL 7 : httpd (RHSA-2014:0921)
2014-07-30 00:00:00
redhat
redhat
(RHSA-2014:0922) Important: httpd24-httpd security update
2014-07-23 00:00:00
(RHSA-2014:0921) Important: httpd security update
2014-07-23 00:00:00
(RHSA-2014:0920) Important: httpd security update
2014-07-23 00:00:00
centos
centos
httpd, mod_ldap, mod_proxy_html, mod_session, mod_ssl security update
2014-07-23 15:36:55
httpd, mod_ssl security update
2014-07-23 15:12:33
httpd, mod_ldap, mod_proxy_html, mod_session, mod_ssl security update
2015-03-17 13:28:17
ibm
ibm
Security Bulletin: Multiple vulnerabilities fixed in IBM HTTP Server (APAR PI22070)
2018-06-15 07:00:11
Security Bulletin: Vulnerabilities in httpd affect IBM SmartCloud Provisioning 2.1 for Software Virtual Appliance
2018-06-17 22:30:11
Security Bulletin: Potential Security Vulnerabilities fixed in IBM WebSphere Application Server 7.0.0.35
2022-09-08 00:26:26
veracode
veracode
Denial Of Service (DoS)
2019-05-02 05:03:43
Denial Of Service (DoS)
2019-05-02 05:03:42
Denial Of Service (DoS)
2019-05-02 05:03:41
gentoo
gentoo
Apache: Multiple vulnerabilities
2015-04-11 00:00:00
hackerone
hackerone
Boozt Fashion AB: Instance of Apache Vulnerable to Several Issues
2016-09-08 15:44:15
Internet Bug Bounty: mod_proxy_fcgi buffer overflow
2014-09-17 00:00:00
freebsd
freebsd
apache22 -- several vulnerabilities
2014-07-19 00:00:00
apache24 -- several vulnerabilities
2014-07-15 00:00:00
apache24 -- several vulnerabilities
2015-01-29 00:00:00
securityvulns
securityvulns
Apache multiple security vulnerabilities
2014-07-28 00:00:00
[USN-2299-1] Apache HTTP Server vulnerabilities
2014-07-28 00:00:00
[USN-2523-1] Apache HTTP Server vulnerabilities
2015-03-15 00:00:00
fedora
fedora
[SECURITY] Fedora 20 Update: httpd-2.4.10-1.fc20
2014-07-25 10:03:52
[SECURITY] Fedora 19 Update: httpd-2.4.10-1.fc19
2014-08-15 02:47:11
[SECURITY] Fedora 21 Update: httpd-2.4.10-15.fc21
2015-03-16 01:41:46
mageia
mageia
Updated apache package fixes security vulnerabilities
2014-07-30 01:30:55
Updated apache package fixes security vulnerabilities
2014-07-30 01:30:55
Updated apache packages fix security vulnerabilities
2014-12-13 23:16:05
slackware
slackware
[slackware-security] httpd
2014-07-24 01:35:41
[slackware-security] httpd
2015-04-22 01:20:26
ubuntu
ubuntu
Apache HTTP Server vulnerabilities
2014-07-23 00:00:00
Apache HTTP Server vulnerabilities
2015-03-10 00:00:00
amazon
amazon
Important: httpd
2014-07-31 13:54:00
Important: httpd24
2014-07-31 13:56:00
Low: httpd24
2015-02-12 10:57:00
debian
debian
[SECURITY] [DSA 2989-1] apache2 security update
2014-07-24 22:19:45
[SECURITY] [DSA 2989-1] apache2 security update
2014-07-24 22:19:45
[SECURITY] [DLA 71-1] apache2 security update
2014-10-16 10:10:29
f5
f5
SOL15893 - Apache HTTP server vulnerabilities CVE-2014-0117, CVE-2014-0118, CVE-2014-0226, CVE-2014-0231, and CVE-2014-3523
2014-12-04 00:00:00
Apache vulnerabilities CVE-2014-8109, CVE-2014-3581, CVE-2014-3583
2015-07-03 00:14:00
SOL16847 - Apache vulnerabilities CVE-2014-8109, CVE-2014-3581, CVE-2014-3583
2015-07-02 00:00:00
osv
osv
apache2 - security update
2014-07-24 00:00:00
apache2 - security update
2014-09-29 00:00:00
apache2 - security update
2014-10-16 00:00:00
suse
suse
Security update for apache2 (important)
2014-09-02 20:04:23
Security update for apache2 (important)
2014-09-02 19:04:20
Security update for the Apache Web Server (important)
2014-08-07 01:04:17
httpd
httpd
Apache Httpd < 2.4.12 : HTTP Trailers processing bypass
2013-09-06 00:00:00
Apache Httpd < 2.2.29 : HTTP Trailers processing bypass
2013-09-06 00:00:00
Apache Httpd < 2.4.12 : mod_cache crash with empty Content-Type header
2014-09-08 00:00:00
cvelist
cvelist
CVE-2013-5704
2014-04-15 10:00:00
CVE-2014-3581
2014-10-10 10:00:00
prion
prion
Design/Logic Flaw
2014-04-15 10:55:00
Design/Logic Flaw
2014-12-15 18:59:00
Null pointer dereference
2014-10-10 10:55:00
seebug
seebug
ModSecurity 'mod_headers'ๆจกๅ—ๅฎ‰ๅ…จ้™ๅˆถ็ป•่ฟ‡ๆผๆดž
2014-04-04 00:00:00
debiancve
debiancve
CVE-2013-5704
2014-04-15 10:55:11
CVE-2014-3583
2014-12-15 18:59:02
CVE-2014-3581
2014-10-10 10:55:07
nvd
nvd
CVE-2013-5704
2014-04-15 10:55:11
cve
cve
CVE-2013-5704
2014-04-15 10:55:11
CVE-2014-3581
2014-10-10 10:55:07
ubuntucve
ubuntucve
CVE-2013-5704
2014-04-15 00:00:00
CVE-2014-3583
2014-12-15 00:00:00
CVE-2014-3581
2014-10-10 00:00:00

EPSS

0.965

Percentile

99.6%

JSON
Related for ELSA-2014-1972
openvas46oraclelinux4nessus62redhat14centos4ibm5veracode5gentoo1hackerone2freebsd3securityvulns4fedora4mageia3slackware2ubuntu2amazon4debian4f55osv3suse3httpd4cvelist2prion3seebug1debiancve3nvd1cve2ubuntucve3