CVE-2020-13938

Опубликовано: 10 июн. 2021

Источник: nvd

CVSS3: 5.5

CVSS2: 2.1

EPSS Низкий

Описание

Apache HTTP Server versions 2.4.0 to 2.4.46 Unprivileged local users can stop httpd on Windows

Ссылки

http://httpd.apache.org/security/vulnerabilities_24.html
Release Notes
Vendor Advisory
http://www.openwall.com/lists/oss-security/2021/06/10/3
Mailing List
Third Party Advisory
https://kc.mcafee.com/corporate/index?page=content&id=SB10379
Third Party Advisory
https://lists.apache.org/thread.html/r5fdc4fbbc7ddb816c843329a9accdcf284ade86e8d77b8c2a6d9bc30%40%3Cannounce.httpd.apache.org%3E
https://lists.apache.org/thread.html/r7f2b70b621651548f4b6f027552f1dd91705d7111bb5d15cda0a68dd%40%3Cdev.httpd.apache.org%3E
https://lists.apache.org/thread.html/re026d3da9d7824bd93b9f871c0fdda978d960c7e62d8c43cba8d0bf3%40%3Ccvs.httpd.apache.org%3E
Mailing List
Release Notes
Vendor Advisory
https://security.netapp.com/advisory/ntap-20210702-0001/
Third Party Advisory
http://httpd.apache.org/security/vulnerabilities_24.html
Release Notes
Vendor Advisory
http://www.openwall.com/lists/oss-security/2021/06/10/3
Mailing List
Third Party Advisory
https://kc.mcafee.com/corporate/index?page=content&id=SB10379
Third Party Advisory
https://lists.apache.org/thread.html/r5fdc4fbbc7ddb816c843329a9accdcf284ade86e8d77b8c2a6d9bc30%40%3Cannounce.httpd.apache.org%3E
https://lists.apache.org/thread.html/r7f2b70b621651548f4b6f027552f1dd91705d7111bb5d15cda0a68dd%40%3Cdev.httpd.apache.org%3E
https://lists.apache.org/thread.html/re026d3da9d7824bd93b9f871c0fdda978d960c7e62d8c43cba8d0bf3%40%3Ccvs.httpd.apache.org%3E
Mailing List
Release Notes
Vendor Advisory
https://security.netapp.com/advisory/ntap-20210702-0001/
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*

Версия от 2.4.0 (включая) до 2.4.46 (включая)

cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

Конфигурация 2

Одно из

cpe:2.3:a:mcafee:epolicy_orchestrator:*:*:*:*:*:*:*:*

Версия до 5.10.0 (исключая)

cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:-:*:*:*:*:*:*

cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_1:*:*:*:*:*:*

cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_10:*:*:*:*:*:*

cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_11:*:*:*:*:*:*

cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_12:*:*:*:*:*:*

cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_2:*:*:*:*:*:*

cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_3:*:*:*:*:*:*

cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_4:*:*:*:*:*:*

cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_5:*:*:*:*:*:*

cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_6:*:*:*:*:*:*

cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_7:*:*:*:*:*:*

cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_8:*:*:*:*:*:*

cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_9:*:*:*:*:*:*

Конфигурация 3

cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:*

EPSS

Процентиль: 23%

0.00077

Низкий

5.5 Medium

CVSS3

2.1 Low

CVSS2

Дефекты

CWE-862

Связанные уязвимости

CVE-2020-13938

CVSS3: 5.5

ubuntu

больше 4 лет назад

Apache HTTP Server versions 2.4.0 to 2.4.46 Unprivileged local users can stop httpd on Windows

CVE-2020-13938

CVSS3: 6.2

redhat

больше 4 лет назад

Apache HTTP Server versions 2.4.0 to 2.4.46 Unprivileged local users can stop httpd on Windows

CVE-2020-13938

CVSS3: 5.5

debian

больше 4 лет назад

Apache HTTP Server versions 2.4.0 to 2.4.46 Unprivileged local users c ...

GHSA-qvx2-v283-5hp3

CVSS3: 5.5

github

больше 3 лет назад

Apache HTTP Server versions 2.4.0 to 2.4.46 Unprivileged local users can stop httpd on Windows

EPSS

Процентиль: 23%

0.00077

Низкий

5.5 Medium

CVSS3

2.1 Low

CVSS2

Дефекты

CWE-862