Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2023:0447-1

Опубликовано: 17 фев. 2023
Источник: suse-cvrf

Описание

Security update for apache2-mod_security2

This update for apache2-mod_security2 fixes the following issues:

  • CVE-2023-24021: Fixed FILES_TMP_CONTENT missing complete content (bsc#1207379).

Список пакетов

SUSE Enterprise Storage 7
apache2-mod_security2-2.9.2-150000.3.9.1
SUSE Enterprise Storage 7.1
apache2-mod_security2-2.9.2-150000.3.9.1
SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS
apache2-mod_security2-2.9.2-150000.3.9.1
SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS
apache2-mod_security2-2.9.2-150000.3.9.1
SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS
apache2-mod_security2-2.9.2-150000.3.9.1
SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS
apache2-mod_security2-2.9.2-150000.3.9.1
SUSE Linux Enterprise Real Time 15 SP3
apache2-mod_security2-2.9.2-150000.3.9.1
SUSE Linux Enterprise Server 15 SP1-LTSS
apache2-mod_security2-2.9.2-150000.3.9.1
SUSE Linux Enterprise Server 15 SP2-LTSS
apache2-mod_security2-2.9.2-150000.3.9.1
SUSE Linux Enterprise Server 15 SP3-LTSS
apache2-mod_security2-2.9.2-150000.3.9.1
SUSE Linux Enterprise Server for SAP Applications 15 SP1
apache2-mod_security2-2.9.2-150000.3.9.1
SUSE Linux Enterprise Server for SAP Applications 15 SP2
apache2-mod_security2-2.9.2-150000.3.9.1
SUSE Linux Enterprise Server for SAP Applications 15 SP3
apache2-mod_security2-2.9.2-150000.3.9.1
SUSE Manager Proxy 4.2
apache2-mod_security2-2.9.2-150000.3.9.1
SUSE Manager Retail Branch Server 4.2
apache2-mod_security2-2.9.2-150000.3.9.1
SUSE Manager Server 4.2
apache2-mod_security2-2.9.2-150000.3.9.1

Ссылки

Описание

Incorrect handling of '\0' bytes in file uploads in ModSecurity before 2.9.7 may allow for Web Application Firewall bypasses and buffer over-reads on the Web Application Firewall when executing rules that read the FILES_TMP_CONTENT collection.

Затронутые продукты
SUSE Enterprise Storage 7.1:apache2-mod_security2-2.9.2-150000.3.9.1
SUSE Enterprise Storage 7:apache2-mod_security2-2.9.2-150000.3.9.1
SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:apache2-mod_security2-2.9.2-150000.3.9.1
SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:apache2-mod_security2-2.9.2-150000.3.9.1
Ссылки