ELSA-2022-1045

Опубликовано: 24 мар. 2022

Источник: oracle-oval

Платформа: Oracle Linux 7

Описание

ELSA-2022-1045: httpd security update (IMPORTANT)

[2.4.6-97.0.5.5]

mod_session: save one apr_strtok() [Orabug: 33338149][CVE-2021-26690]
replace index.html with Oracle's index page oracle_index.html

[2.4.6-97.5]

Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling vulnerability in Apache HTTP Server 2.4.52 and earlier

Обновленные пакеты

Oracle Linux 7

Oracle Linux aarch64

httpd

2.4.6-97.0.5.el7_9.5

httpd-devel

2.4.6-97.0.5.el7_9.5

httpd-manual

2.4.6-97.0.5.el7_9.5

httpd-tools

2.4.6-97.0.5.el7_9.5

mod_ldap

2.4.6-97.0.5.el7_9.5

mod_proxy_html

2.4.6-97.0.5.el7_9.5

mod_session

2.4.6-97.0.5.el7_9.5

mod_ssl

2.4.6-97.0.5.el7_9.5

Oracle Linux x86_64

httpd

2.4.6-97.0.5.el7_9.5

httpd-devel

2.4.6-97.0.5.el7_9.5

httpd-manual

2.4.6-97.0.5.el7_9.5

httpd-tools

2.4.6-97.0.5.el7_9.5

mod_ldap

2.4.6-97.0.5.el7_9.5

mod_proxy_html

2.4.6-97.0.5.el7_9.5

mod_session

2.4.6-97.0.5.el7_9.5

mod_ssl

2.4.6-97.0.5.el7_9.5

Связанные CVE

CVE-2022-22720

Ссылки на источники

Связанные уязвимости

CVE-2022-22720

CVSS3: 9.8

ubuntu

больше 3 лет назад

Apache HTTP Server 2.4.52 and earlier fails to close inbound connection when errors are encountered discarding the request body, exposing the server to HTTP Request Smuggling

CVE-2022-22720

CVSS3: 8.3

redhat

больше 3 лет назад

Apache HTTP Server 2.4.52 and earlier fails to close inbound connection when errors are encountered discarding the request body, exposing the server to HTTP Request Smuggling

CVE-2022-22720

CVSS3: 9.8

nvd

больше 3 лет назад

Apache HTTP Server 2.4.52 and earlier fails to close inbound connection when errors are encountered discarding the request body, exposing the server to HTTP Request Smuggling

CVE-2022-22720

CVSS3: 9.8

msrc

больше 3 лет назад

Описание отсутствует

CVE-2022-22720

CVSS3: 9.8

debian

больше 3 лет назад

Apache HTTP Server 2.4.52 and earlier fails to close inbound connectio ...