Описание
Stack-based buffer overflow in mod_vhost_alias in Apache Software Foundation Apache HTTP Server through 2.4.68 on all platforms allows a remote client to cause a denial of service or potentially execute arbitrary code via an HTTP request with a Host header exceeding 8192 bytes when VirtualDocumentRoot uses a hostname format specifier and LimitRequestFieldSize is raised above the default. Users are recommended to upgrade to version 2.4.69, which fixes this issue.
| Релиз | Статус | Примечание |
|---|---|---|
| devel | needed | |
| esm-infra-legacy/trusty | released | 2.4.7-1ubuntu4.22+esm17 |
| esm-infra-legacy/xenial | released | 2.4.18-2ubuntu3.17+esm22 |
| esm-infra/bionic | released | 2.4.29-1ubuntu4.27+esm13 |
| esm-infra/focal | released | 2.4.41-4ubuntu3.23+esm9 |
| jammy | released | 2.4.52-1ubuntu4.25 |
| noble | released | 2.4.58-1ubuntu8.17 |
| resolute | released | 2.4.66-2ubuntu2.6 |
| stonking | needed | |
| upstream | released | 2.4.69-1 |
Показывать по
EPSS
7.5 High
CVSS3
Связанные уязвимости
Stack-based buffer overflow in mod_vhost_alias in Apache Software Foundation Apache HTTP Server through 2.4.68 on all platforms allows a remote client to cause a denial of service or potentially execute arbitrary code via an HTTP request with a Host header exceeding 8192 bytes when VirtualDocumentRoot uses a hostname format specifier and LimitRequestFieldSize is raised above the default. Users are recommended to upgrade to version 2.4.69, which fixes this issue.
Stack-based buffer overflow in mod_vhost_alias in Apache Software Foundation Apache HTTP Server through 2.4.68 on all platforms allows a remote client to cause a denial of service or potentially execute arbitrary code via an HTTP request with a Host header exceeding 8192 bytes when VirtualDocumentRoot uses a hostname format specifier and LimitRequestFieldSize is raised above the default. Users are recommended to upgrade to version 2.4.69, which fixes this issue.
Stack-based buffer overflow in mod_vhost_alias in Apache Software Foun ...
Stack-based buffer overflow in mod_vhost_alias in Apache Software Foundation Apache HTTP Server through 2.4.68 on all platforms allows a remote client to cause a denial of service or potentially execute arbitrary code via an HTTP request with a Host header exceeding 8192 bytes when VirtualDocumentRoot uses a hostname format specifier and LimitRequestFieldSize is raised above the default. Users are recommended to upgrade to version 2.4.69, which fixes this issue.
EPSS
7.5 High
CVSS3