Memory Corruption

2019-05-0205:50:23

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.023 Low

EPSS

Percentile

89.7%

JSON

mod_cluster is vulnerable to memory corruption attacks. Buffer overflow in mod_manager when sending requests with long JVMRoute lead to a memory corruption vulnerability. This may crash the application which results in denial of service.

CPENameOperatorVersion
httpd22eq2.2.26__37.ep6.el7
httpd22eq2.2.26__38.ep6.el7
httpd22eq2.2.26__41.ep6.el7
httpd22eq2.2.26__42.ep6.el7
hornetq-nativeeq2.3.25__3.Final_redhat_1.ep6.el7
hornetq-nativeeq2.2.8__1.CR1.1.ep5.el6
hornetq-nativeeq2.2.21__1.Final.ep6.el6
hornetq-nativeeq2.3.20__2.Final_redhat_1.ep6.el7
hornetq-nativeeq2.3.5__1.Final_redhat_1.ep6.el6
hornetq-nativeeq2.3.20__2.Final_redhat_1.ep6.el6

Name	Operator	Version
httpd22	eq	2.2.26__37.ep6.el7
httpd22	eq	2.2.26__38.ep6.el7
httpd22	eq	2.2.26__41.ep6.el7
httpd22	eq	2.2.26__42.ep6.el7
hornetq-native	eq	2.3.25__3.Final_redhat_1.ep6.el7
hornetq-native	eq	2.2.8__1.CR1.1.ep5.el6
hornetq-native	eq	2.2.21__1.Final.ep6.el6
hornetq-native	eq	2.3.20__2.Final_redhat_1.ep6.el7
hornetq-native	eq	2.3.5__1.Final_redhat_1.ep6.el6
hornetq-native	eq	2.3.20__2.Final_redhat_1.ep6.el6