Описание
Buffer Underwrite vulnerability in Apache HTTP Server on crafted regular expressions in the configuration. This issue affects Apache HTTP Server: from 2.4.0 through 2.4.67. Users are recommended to upgrade to version 2.4.68, which fixes the issue.
| Релиз | Статус | Примечание |
|---|---|---|
| devel | pending | 2.4.68-1ubuntu2 |
| esm-infra-legacy/trusty | not-affected | code not present |
| esm-infra-legacy/xenial | released | 2.4.18-2ubuntu3.17+esm19 |
| esm-infra/bionic | released | 2.4.29-1ubuntu4.27+esm10 |
| esm-infra/focal | released | 2.4.41-4ubuntu3.23+esm5 |
| jammy | released | 2.4.52-1ubuntu4.23 |
| noble | released | 2.4.58-1ubuntu8.15 |
| questing | ignored | end of life, was needs-triage |
| resolute | released | 2.4.66-2ubuntu2.4 |
| upstream | released | 2.4.68 |
Показывать по
Ссылки на источники
EPSS
9.8 Critical
CVSS3
Связанные уязвимости
Buffer Underwrite vulnerability in Apache HTTP Server on crafted regular expressions in the configuration. This issue affects Apache HTTP Server: from 2.4.0 through 2.4.67. Users are recommended to upgrade to version 2.4.68, which fixes the issue.
Buffer Underwrite vulnerability in Apache HTTP Server on crafted regular expressions in the configuration. This issue affects Apache HTTP Server: from 2.4.0 through 2.4.67. Users are recommended to upgrade to version 2.4.68, which fixes the issue.
Apache HTTP Server: Heap Underflow in `ap_regname` via Signed Char Overflow
Buffer Underwrite vulnerability in Apache HTTP Server on crafted regul ...
Buffer Underwrite vulnerability in Apache HTTP Server on crafted regular expressions in the configuration. This issue affects Apache HTTP Server: from 2.4.0 through 2.4.67. Users are recommended to upgrade to version 2.4.68, which fixes the issue.
EPSS
9.8 Critical
CVSS3