Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

altlinux логотип

ALT-PU-2021-1838

Критический

ALT-PU-2021-1838: package apache2 update to version 2.4.47-alt1

Источник
errata.altlinux.org
Дата публикации
20.05.2021
Дата обновления
04.02.2026
Устраненные уязвимости
13

ALT Linux branch p11
ALT Container
ALT Education
ALT Workstation
ALT Workstation K
ALT Server
ALT Virtualization PVE Edition
ALT Linux branch p10
ALT Server
ALT Virtualization Server
ALT Workstation
ALT Workstation K
ALT Education
Simply Linux
Starterkit
ALT Container

Описание

This update upgrades apache2 to version 2.4.47-alt1.

Устраненные уязвимости13

Связанные уязвимости

CVSS3: 5.3
ubuntu
больше 5 лет назад

Apache HTTP Server versions 2.4.6 to 2.4.46 mod_proxy_wstunnel configured on an URL that is not necessarily Upgraded by the origin server was tunneling the whole connection regardless, thus allowing for subsequent requests on the same connection to pass through with no HTTP validation, authentication or authorization possibly configured.

CVSS3: 4.8
redhat
больше 5 лет назад

Apache HTTP Server versions 2.4.6 to 2.4.46 mod_proxy_wstunnel configured on an URL that is not necessarily Upgraded by the origin server was tunneling the whole connection regardless, thus allowing for subsequent requests on the same connection to pass through with no HTTP validation, authentication or authorization possibly configured.

CVSS3: 5.3
nvd
больше 5 лет назад

Apache HTTP Server versions 2.4.6 to 2.4.46 mod_proxy_wstunnel configured on an URL that is not necessarily Upgraded by the origin server was tunneling the whole connection regardless, thus allowing for subsequent requests on the same connection to pass through with no HTTP validation, authentication or authorization possibly configured.

CVSS3: 5.3
msrc
больше 5 лет назад

mod_proxy_wstunnel tunneling of non Upgraded connections

CVSS3: 5.3
debian
больше 5 лет назад

Apache HTTP Server versions 2.4.6 to 2.4.46 mod_proxy_wstunnel configu ...