Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
oraclelinuxOracleLinuxELSA-2020-1121
HistoryApr 06, 2020 - 12:00 a.m.

httpd security, bug fix, and enhancement update

2020-04-0600:00:00
linux.oracle.com
29

0.026 Low

EPSS

Percentile

90.4%

JSON

[2.4.6-93.0.1]

  • replace index.html with Oracles index page oracle_index.html
    [2.4.6-93]
  • Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect
    expiry time
    [2.4.6-92]
  • htpasswd: add SHA-2 crypt() support (#1486889)
    [2.4.6-91]
  • Resolves: #1630886 - scriptlet can fail if hostname is not installed
  • Resolves: #1565465 - CVE-2017-15710 httpd: Out of bound write in
    mod_authnz_ldap when using too small Accept-Language values
  • Resolves: #1568298 - CVE-2018-1301 httpd: Out of bounds access after
    failure in reading the HTTP request
  • Resolves: #1673457 - Apache child process crashes because ScriptAliasMatch
    directive
  • Resolves: #1633152 - mod_session missing apr-util-openssl
  • Resolves: #1649470 - httpd response contains garbage in Content-Type header
  • Resolves: #1724034 - Unexpected OCSP in proxy SSL connection
OSVersionArchitecturePackageVersionFilename
oracle linux7srchttpd< 2.4.6-93.0.1.el7httpd-2.4.6-93.0.1.el7.src.rpm
oracle linux7aarch64httpd< 2.4.6-93.0.1.el7httpd-2.4.6-93.0.1.el7.aarch64.rpm
oracle linux7aarch64httpd-devel< 2.4.6-93.0.1.el7httpd-devel-2.4.6-93.0.1.el7.aarch64.rpm
oracle linux7noarchhttpd-manual< 2.4.6-93.0.1.el7httpd-manual-2.4.6-93.0.1.el7.noarch.rpm
oracle linux7aarch64httpd-tools< 2.4.6-93.0.1.el7httpd-tools-2.4.6-93.0.1.el7.aarch64.rpm
oracle linux7aarch64mod_ldap< 2.4.6-93.0.1.el7mod_ldap-2.4.6-93.0.1.el7.aarch64.rpm
oracle linux7aarch64mod_proxy_html< 2.4.6-93.0.1.el7mod_proxy_html-2.4.6-93.0.1.el7.aarch64.rpm
oracle linux7aarch64mod_session< 2.4.6-93.0.1.el7mod_session-2.4.6-93.0.1.el7.aarch64.rpm
oracle linux7aarch64mod_ssl< 2.4.6-93.0.1.el7mod_ssl-2.4.6-93.0.1.el7.aarch64.rpm
oracle linux7srchttpd< 2.4.6-93.0.1.el7httpd-2.4.6-93.0.1.el7.src.rpm
Rows per page:
1-10 of 181

Related

nessus 56
redhat 2
centos 1
ibm 27
debian 4
openvas 37
osv 8
ubuntu 3
cvelist 3
redhatcve 3
prion 3
ubuntucve 3
httpd 3
debiancve 3
nvd 3
f5 3
cve 3
veracode 3
alpinelinux 3
suse 4
fedora 3
kaspersky 2
mageia 2
altlinux 6
archlinux 2
freebsd 2
amazon 2
slackware 1
oraclelinux 1
almalinux 1
rocky 1
gentoo 1
nessus
nessus
NewStart CGSL CORE 5.05 / MAIN 5.05 : httpd Multiple Vulnerabilities (NS-SA-2020-0110)
2020-12-09 00:00:00
Oracle Linux 7 : httpd (ELSA-2020-1121)
2023-09-07 00:00:00
NewStart CGSL CORE 5.04 / MAIN 5.04 : httpd Multiple Vulnerabilities (NS-SA-2020-0066)
2020-12-09 00:00:00
redhat
redhat
(RHSA-2020:1121) Moderate: httpd security, bug fix, and enhancement update
2020-03-31 09:21:40
(RHSA-2021:1809) Moderate: httpd:2.4 security, bug fix, and enhancement update
2021-05-18 06:08:34
centos
centos
httpd, mod_ldap, mod_proxy_html, mod_session, mod_ssl security update
2020-04-08 18:07:48
ibm
ibm
Security Bulletin: Vulnerability in httpd (CVE-2018-17199 and CVE-2018-1301).
2021-09-22 23:38:15
Security Bulletin: Multiple vulnerabilities in the IBM HTTP Server used in IBM WebSphere Application Server in IBM Cloud(CVE-2017-15710, CVE-2017-15715, CVE-2018-1301)
2018-07-17 22:09:11
Security Bulletin: Multiple vulnerabilities in the IBM HTTP Server bundled with IBM WebSphere Application Server Patterns and IBM WebSphere Application Server for Cloud (CVE-2017-15710, CVE-2017-15715, CVE-2018-1301)
2018-06-15 07:09:13
debian
debian
[SECURITY] [DLA 1389-1] apache2 security update
2018-05-30 13:24:40
[SECURITY] [DLA 1647-1] apache2 security update
2019-01-29 21:28:38
[SECURITY] [DSA 4164-1] apache2 security update
2018-04-03 16:02:15
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2018:1079-1)
2021-06-09 00:00:00
Debian: Security Advisory (DLA-1389-1)
2018-06-03 00:00:00
Ubuntu: Security Advisory (USN-3937-2)
2022-08-26 00:00:00
osv
osv
apache2 - security update
2018-05-30 00:00:00
apache2 - security update
2019-01-29 00:00:00
CVE-2017-15710
2018-03-26 15:29:00
ubuntu
ubuntu
Apache vulnerabilities
2019-04-10 00:00:00
Apache HTTP Server vulnerabilities
2018-04-30 00:00:00
Apache HTTP Server vulnerabilities
2018-04-19 00:00:00
cvelist
cvelist
CVE-2018-17199
2019-01-22 00:00:00
CVE-2017-15710
2018-03-23 00:00:00
CVE-2018-1301
2018-03-23 00:00:00
redhatcve
redhatcve
CVE-2018-17199
2019-01-22 21:50:18
CVE-2017-15710
2018-03-26 14:48:56
CVE-2018-1301
2018-03-26 16:18:55
prion
prion
Session fixation
2019-01-30 22:29:00
Design/Logic Flaw
2018-03-26 15:29:00
Design/Logic Flaw
2018-03-26 15:29:00
ubuntucve
ubuntucve
CVE-2018-17199
2019-01-30 00:00:00
CVE-2017-15710
2018-03-26 00:00:00
CVE-2018-1301
2018-03-26 00:00:00
httpd
httpd
Apache Httpd < 2.4.38 : mod_session_cookie does not respect expiry time
2018-10-08 00:00:00
Apache Httpd < 2.4.33 : Out of bound write in mod_authnz_ldap when using too small Accept-Language values
2017-12-07 00:00:00
Apache Httpd < 2.4.33 : Possible out of bound access after failure in reading the HTTP request
2018-01-23 00:00:00
debiancve
debiancve
CVE-2018-17199
2019-01-30 22:29:00
CVE-2017-15710
2018-03-26 15:29:00
CVE-2018-1301
2018-03-26 15:29:00
nvd
nvd
CVE-2017-15710
2018-03-26 15:29:00
CVE-2018-17199
2019-01-30 22:29:00
CVE-2018-1301
2018-03-26 15:29:00
f5
f5
K14027805 : Apache vulnerability CVE-2017-15710
2018-03-30 00:00:00
K54296221 : Apache httpd vulnerability CVE-2018-17199
2019-02-05 00:00:00
K78131906 : Apache HTTPD vulnerability CVE-2018-1301
2018-04-11 00:00:00
cve
cve
CVE-2017-15710
2018-03-26 15:29:00
CVE-2018-17199
2019-01-30 22:29:00
CVE-2018-1301
2018-03-26 15:29:00
veracode
veracode
Denial Of Service (DoS)
2019-05-16 03:21:40
Improper Session Management
2019-11-21 00:17:08
Denial Of Service (DoS)
2019-05-16 03:21:43
alpinelinux
alpinelinux
CVE-2018-17199
2019-01-30 22:29:00
CVE-2018-1301
2018-03-26 15:29:00
CVE-2017-15710
2018-03-26 15:29:00
suse
suse
Security update for apache2 (important)
2018-04-05 21:09:45
Security update for apache2 (moderate)
2019-03-06 00:00:00
Security update for apache2 (important)
2018-04-09 03:07:20
fedora
fedora
[SECURITY] Fedora 28 Update: httpd-2.4.33-2.fc28
2018-04-05 11:50:14
[SECURITY] Fedora 27 Update: httpd-2.4.33-2.fc27
2018-04-05 23:59:00
[SECURITY] Fedora 26 Update: httpd-2.4.33-4.fc26
2018-05-12 18:27:28
kaspersky
kaspersky
KLA12361 Multiple vulnerabilities in Apache HTTP Server
2018-03-21 00:00:00
KLA12364 Multiple vulnerabilities in Apache HTTP Server
2019-02-28 00:00:00
mageia
mageia
Updated apache packages fix security vulnerability
2019-03-15 00:39:55
Updated apache packages fix security vulnerabilities
2018-11-20 14:11:24
altlinux
altlinux
Security fix for the ALT Linux 10 package apache2 version 1:2.4.33-alt1
2018-03-31 00:00:00
Security fix for the ALT Linux 9 package apache2 version 1:2.4.33-alt1
2018-03-31 00:00:00
Security fix for the ALT Linux 8 package apache2 version 1:2.4.33-alt1
2018-03-31 00:00:00
archlinux
archlinux
[ASA-201804-4] apache: multiple issues
2018-04-04 00:00:00
[ASA-201901-14] apache: multiple issues
2019-01-24 00:00:00
freebsd
freebsd
apache -- multiple vulnerabilities
2018-03-23 00:00:00
Apache -- vulnerability
2019-01-22 00:00:00
amazon
amazon
Medium: httpd24
2018-05-03 16:29:00
Important: httpd24
2019-03-06 22:21:00
slackware
slackware
[slackware-security] httpd
2019-01-23 04:41:31
oraclelinux
oraclelinux
httpd:2.4 security, bug fix, and enhancement update
2021-05-25 00:00:00
almalinux
almalinux
Moderate: httpd:2.4 security, bug fix, and enhancement update
2021-05-18 06:08:34
rocky
rocky
httpd:2.4 security, bug fix, and enhancement update
2021-05-18 06:08:34
gentoo
gentoo
Apache: Multiple vulnerabilities
2019-03-28 00:00:00

0.026 Low

EPSS

Percentile

90.4%

JSON
Related for ELSA-2020-1121
nessus56redhat2centos1ibm27debian4openvas37osv8ubuntu3cvelist3redhatcve3prion3ubuntucve3httpd3debiancve3nvd3f53cve3veracode3alpinelinux3suse4fedora3kaspersky2mageia2altlinux6archlinux2freebsd2amazon2slackware1oraclelinux1almalinux1rocky1gentoo1