Описание
Buffer Over-read vulnerability in Apache HTTP Server via outbound OCSP requests to an attacker controlled OCSP server This issue affects Apache HTTP Server: from 2.4.0 through 2.4.67. Users are recommended to upgrade to version 2.4.68, which fixes the issue.
| Релиз | Статус | Примечание |
|---|---|---|
| devel | pending | 2.4.68-1ubuntu2 |
| esm-infra-legacy/trusty | released | 2.4.7-1ubuntu4.22+esm14 |
| esm-infra-legacy/xenial | released | 2.4.18-2ubuntu3.17+esm19 |
| esm-infra/bionic | released | 2.4.29-1ubuntu4.27+esm10 |
| esm-infra/focal | released | 2.4.41-4ubuntu3.23+esm5 |
| jammy | released | 2.4.52-1ubuntu4.23 |
| noble | released | 2.4.58-1ubuntu8.15 |
| questing | ignored | end of life, was needs-triage |
| resolute | released | 2.4.66-2ubuntu2.4 |
| upstream | released | 2.4.68 |
Показывать по
Ссылки на источники
7.3 High
CVSS3
Связанные уязвимости
Buffer Over-read vulnerability in Apache HTTP Server via outbound OCSP requests to an attacker controlled OCSP server This issue affects Apache HTTP Server: from 2.4.0 through 2.4.67. Users are recommended to upgrade to version 2.4.68, which fixes the issue.
Buffer Over-read vulnerability in Apache HTTP Server via outbound OCSP requests to an attacker controlled OCSP server This issue affects Apache HTTP Server: from 2.4.0 through 2.4.67. Users are recommended to upgrade to version 2.4.68, which fixes the issue.
Apache HTTP Server: Stack Buffer Over-Read in mod_ssl OCSP `send_request`
Buffer Over-read vulnerability in Apache HTTP Server via outbound OCSP ...
Buffer Over-read vulnerability in Apache HTTP Server via outbound OCSP requests to an attacker controlled OCSP server This issue affects Apache HTTP Server: from 2.4.0 through 2.4.67. Users are recommended to upgrade to version 2.4.68, which fixes the issue.
7.3 High
CVSS3