Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
oraclelinuxOracleLinuxELSA-2020-3958
HistoryOct 06, 2020 - 12:00 a.m.

httpd security, bug fix, and enhancement update

2020-10-0600:00:00
linux.oracle.com
182
httpd
bug fix
enhancement
security
update
cve-2020-1934
cve-2017-15715
cve-2019-10098
cve-2018-1303
cve-2018-1283

EPSS

0.958

Percentile

99.5%

JSON

[2.4.6-95.0.1]

  • replace index.html with Oracles index page oracle_index.html
    [2.4.6-95]
  • Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
    value
    [2.4.6-94]
  • Resolves: #1565491 - CVE-2017-15715 httpd:
    bypass with a trailing
    newline in the file name
  • Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
  • Resolves: #1724879 - httpd terminates all SSL connections using an abortive
    shutdown
  • Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
  • Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
    mod_cache_socache can allow a remote attacker to cause a denial of service
  • Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in
    mod_session can allow a remote user to modify session data for CGI applications
OSVersionArchitecturePackageVersionFilename
oracle linux7srchttpd< 2.4.6-95.0.1.el7httpd-2.4.6-95.0.1.el7.src.rpm
oracle linux7aarch64httpd< 2.4.6-95.0.1.el7httpd-2.4.6-95.0.1.el7.aarch64.rpm
oracle linux7aarch64httpd-devel< 2.4.6-95.0.1.el7httpd-devel-2.4.6-95.0.1.el7.aarch64.rpm
oracle linux7noarchhttpd-manual< 2.4.6-95.0.1.el7httpd-manual-2.4.6-95.0.1.el7.noarch.rpm
oracle linux7aarch64httpd-tools< 2.4.6-95.0.1.el7httpd-tools-2.4.6-95.0.1.el7.aarch64.rpm
oracle linux7aarch64mod_ldap< 2.4.6-95.0.1.el7mod_ldap-2.4.6-95.0.1.el7.aarch64.rpm
oracle linux7aarch64mod_proxy_html< 2.4.6-95.0.1.el7mod_proxy_html-2.4.6-95.0.1.el7.aarch64.rpm
oracle linux7aarch64mod_session< 2.4.6-95.0.1.el7mod_session-2.4.6-95.0.1.el7.aarch64.rpm
oracle linux7aarch64mod_ssl< 2.4.6-95.0.1.el7mod_ssl-2.4.6-95.0.1.el7.aarch64.rpm
oracle linux7srchttpd< 2.4.6-95.0.1.el7httpd-2.4.6-95.0.1.el7.src.rpm
Rows per page:
1-10 of 181

Related

nessus 53
redhat 2
centos 1
freebsd 2
archlinux 2
openvas 36
ibm 14
mageia 2
altlinux 6
photon 2
amazon 3
kaspersky 2
suse 3
fedora 5
debian 3
ubuntu 2
osv 5
debiancve 4
prion 4
cvelist 5
ubuntucve 5
veracode 5
cve 4
f5 4
redhatcve 5
checkpoint_advisories 2
alpinelinux 5
nvd 4
nuclei 2
zdt 1
exploitdb 1
httpd 4
hackerone 1
nessus
nessus
RHEL 7 : httpd (RHSA-2020:3958)
2020-09-29 00:00:00
NewStart CGSL CORE 5.05 / MAIN 5.05 : httpd Multiple Vulnerabilities (NS-SA-2021-0159)
2021-10-27 00:00:00
CentOS 7 : httpd (CESA-2020:3958)
2020-10-20 00:00:00
redhat
redhat
(RHSA-2020:3958) Moderate: httpd security, bug fix, and enhancement update
2020-09-29 07:46:42
(RHSA-2020:2263) Moderate: httpd24-httpd and httpd24-mod_md security and enhancement update
2020-05-26 07:28:44
centos
centos
httpd, mod_ldap, mod_proxy_html, mod_session, mod_ssl security update
2020-10-20 18:13:33
freebsd
freebsd
Apache -- Multiple vulnerabilities
2020-04-01 00:00:00
apache -- multiple vulnerabilities
2018-03-23 00:00:00
archlinux
archlinux
[ASA-202004-14] apache: multiple issues
2020-04-15 00:00:00
[ASA-201804-4] apache: multiple issues
2018-04-04 00:00:00
openvas
openvas
Huawei EulerOS: Security Advisory for httpd (EulerOS-SA-2020-1552)
2020-04-30 00:00:00
Huawei EulerOS: Security Advisory for httpd (EulerOS-SA-2020-1601)
2020-06-03 00:00:00
Huawei EulerOS: Security Advisory for httpd (EulerOS-SA-2020-1749)
2020-07-03 00:00:00
ibm
ibm
Security Bulletin: Vulnerabilities in Apache HTTP CVE-2019-10098 and CVE-2020-1927.
2021-09-22 23:38:15
Security Bulletin: Rational Build Forge Security Advisory for Apache HTTP Server (CVE-2020-1927, CVE-2020-1934)
2020-07-27 07:17:02
Security Bulletin: Multiple security vulnerabilities have been identified in IBM HTTP Server shipped with IBM Rational ClearCase (CVE-2020-1927, CVE-2020-1934)
2020-04-17 21:29:53
mageia
mageia
Updated apache packages fix security vulnerabilities
2020-04-15 13:12:14
Updated apache packages fix security vulnerabilities
2018-11-20 14:11:24
altlinux
altlinux
Security fix for the ALT Linux 8 package apache2 version 1:2.4.43-alt1
2020-04-09 00:00:00
Security fix for the ALT Linux 9 package apache2 version 1:2.4.43-alt1
2020-04-08 00:00:00
Security fix for the ALT Linux 10 package apache2 version 1:2.4.43-alt1
2020-04-06 00:00:00
photon
photon
Moderate Photon OS Security Update - PHSA-2020-0079
2020-04-10 00:00:00
Moderate Photon OS Security Update - PHSA-2020-3.0-0079
2020-04-10 00:00:00
amazon
amazon
Low: httpd
2020-05-19 18:32:00
Low: httpd24
2020-05-22 20:57:00
Medium: httpd24
2018-05-03 16:29:00
kaspersky
kaspersky
KLA12367 Multiple vulnerabilities in Apache HTTP Server
2020-04-01 00:00:00
KLA12361 Multiple vulnerabilities in Apache HTTP Server
2018-03-21 00:00:00
suse
suse
Security update for apache2 (important)
2018-04-09 03:07:20
Security update for apache2 (important)
2018-04-05 21:09:45
Security update for apache2 (important)
2020-05-02 00:00:00
fedora
fedora
[SECURITY] Fedora 27 Update: httpd-2.4.33-2.fc27
2018-04-05 23:59:00
[SECURITY] Fedora 28 Update: httpd-2.4.33-2.fc28
2018-04-05 11:50:14
[SECURITY] Fedora 26 Update: httpd-2.4.33-4.fc26
2018-05-12 18:27:28
debian
debian
[SECURITY] [DSA 4164-1] apache2 security update
2018-04-03 16:02:15
[SECURITY] [DSA 4164-1] apache2 security update
2018-04-03 16:02:15
[SECURITY] [DSA 4757-1] apache2 security update
2020-08-31 15:10:58
ubuntu
ubuntu
Apache HTTP Server vulnerabilities
2018-04-30 00:00:00
Apache HTTP Server vulnerabilities
2018-04-19 00:00:00
osv
osv
apache2 - security update
2018-04-03 00:00:00
CVE-2019-10098
2019-09-25 17:15:10
CVE-2017-15715
2018-03-26 15:29:00
debiancve
debiancve
CVE-2017-15715
2018-03-26 15:29:00
CVE-2019-10098
2019-09-25 17:15:10
CVE-2020-1934
2020-04-01 20:15:15
prion
prion
Code injection
2018-03-26 15:29:00
Code injection
2019-09-25 17:15:00
Code injection
2020-04-01 20:15:00
cvelist
cvelist
CVE-2017-15715
2018-03-26 15:00:00
CVE-2019-10098
2019-09-25 16:39:23
CVE-2020-1934
2020-04-01 19:22:23
ubuntucve
ubuntucve
CVE-2017-15715
2018-03-26 00:00:00
CVE-2019-10098
2019-08-14 00:00:00
CVE-2018-1303
2018-03-26 00:00:00
veracode
veracode
Privilege Escalation
2019-05-16 03:21:40
Open Redirects
2020-05-27 03:19:07
Denial Of Service (DoS)
2019-05-16 03:21:43
cve
cve
CVE-2017-15715
2018-03-26 15:29:00
CVE-2019-10098
2019-09-25 17:15:10
CVE-2020-1934
2020-04-01 20:15:15
f5
f5
K27757011 : Apache HTTPD vulnerability CVE-2017-15715
2018-04-05 00:00:00
K25126370 : Apache HTTPD vulnerability CVE-2019-10098
2019-09-17 00:00:00
Apache mod_proxy_ftp vulnerability CVE-2020-1934
2021-03-10 19:35:00
redhatcve
redhatcve
CVE-2017-15715
2018-03-26 15:18:59
CVE-2019-10098
2019-08-21 05:22:33
CVE-2020-1934
2020-04-03 21:01:35
checkpoint_advisories
checkpoint_advisories
Apache httpd FilesMatch Directive Security Restriction Bypass (CVE-2017-15715)
2018-05-30 00:00:00
Apache httpd mod_cache_socache Denial of Service (CVE-2018-1303)
2018-05-27 00:00:00
alpinelinux
alpinelinux
CVE-2017-15715
2018-03-26 15:29:00
CVE-2019-10098
2019-09-25 17:15:10
CVE-2020-1934
2020-04-01 20:15:15
nvd
nvd
CVE-2017-15715
2018-03-26 15:29:00
CVE-2019-10098
2019-09-25 17:15:10
CVE-2020-1934
2020-04-01 20:15:15
nuclei
nuclei
Apache httpd <=2.4.29 - Arbitrary File Upload
2021-04-23 13:34:52
Apache HTTP server v2.4.0 to v2.4.39 - Open Redirect
2023-06-14 17:14:42
zdt
zdt
Apache Httpd mod_rewrite - Open Redirects Vulnerability
2019-11-19 00:00:00
exploitdb
exploitdb
Apache Httpd mod_rewrite - Open Redirects
2019-10-14 00:00:00
httpd
httpd
Apache Httpd < 2.4.33 : <FilesMatch> bypass with a trailing newline in the file name
2017-11-24 00:00:00
Apache Httpd < 2.4.41 : mod_rewrite potential open redirect
2019-03-26 00:00:00
Apache Httpd < 2.4.33 : Possible out of bound read in mod_cache_socache
2018-01-23 00:00:00
hackerone
hackerone
Internet Bug Bounty: Use of uninitialized value in ftp_getrc_msg method of mod_proxy_ftp.c
2020-04-04 07:29:16

EPSS

0.958

Percentile

99.5%

JSON
Related for ELSA-2020-3958
nessus53redhat2centos1freebsd2archlinux2openvas36ibm14mageia2altlinux6photon2amazon3kaspersky2suse3fedora5debian3ubuntu2osv5debiancve4prion4cvelist5ubuntucve5veracode5cve4f54redhatcve5checkpoint_advisories2alpinelinux5nvd4nuclei2zdt1exploitdb1httpd4hackerone1