Описание
Apache HTTP server 2.4.32 to 2.4.44 mod_proxy_uwsgi info disclosure and possible RCE
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| apache2 | fixed | 2.4.46-1 | package | |
| apache2 | not-affected | stretch | package | |
| uwsgi | unfixed | package |
Примечания
https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2020-11984
https://www.openwall.com/lists/oss-security/2020/08/07/1
https://svn.apache.org/r1880251
https://github.com/apache/httpd/commit/0c543e3f5b3881d515d6235f152aacaaaf3aba72
uwsgi since 2.0.15-11 drops building the libapache2-mod-proxy-uwsgi{,-dbg}
packages which are provided by src:apache2 itself.
EPSS
Связанные уязвимости
Apache HTTP server 2.4.32 to 2.4.44 mod_proxy_uwsgi info disclosure and possible RCE
Apache HTTP server 2.4.32 to 2.4.44 mod_proxy_uwsgi info disclosure and possible RCE
Apache HTTP server 2.4.32 to 2.4.44 mod_proxy_uwsgi info disclosure and possible RCE
Apache HTTP server 2.4.32 to 2.4.44 mod_proxy_uwsgi info disclosure and possible RCE
EPSS