Most recent entries from all

ALSA-2021:1809 — Moderate: httpd:2.4 security, bug fix, and enhancement update

Affected: AlmaLinux:8: mod_http2, AlmaLinux:8: mod_md

The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server.

Security Fix(es):

* httpd: mod_session_cookie does not respect expiry time (CVE-2018-17199)

* httpd: mod_proxy_uwsgi buffer overflow (CVE-2020-11984)

* httpd: mod_http2 concurrent pool usage (CVE-2020-11993)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

bdu:2021-00779

Withdrawn: BELL-CVE-2020-11993 — CVE-2020-11993 does not affect BellSoft software

Withdrawn by the publisher.

BIT-apache-2020-11993

Affected: Bitnami: apache

Apache HTTP Server versions 2.4.20 to 2.4.43 When trace/debug was enabled for the HTTP/2 module and on certain traffic edge patterns, logging statements were made on the wrong connection, causing concurrent use of memory pools. Configuring the LogLevel of mod_http2 above "info" will mitigate this vulnerability for unpatched servers.

certfr-2020-avi-490 — De multiples vulnérabilités ont été découvertes dans Apache Server. Elles permettent à un attaquant de provoquer un dén…

certfr-2020-avi-490

cnvd-2020-46279

EUVD-2026-40990

fkie_cve-2020-11993

GHSA-89mq-r3q6-9q3q

gsd-2020-11993

msrc_CVE-2020-11993 — Apache HTTP Server versions 2.4.20 to 2.4.43 When trace/debug was enabled for the HTTP/2 module and on certain traffic…

msrc_CVE-2020-11993

openSUSE-SU-2020:1285-1 — Security update for apache2

Security update for apache2

RHBA-2020:5280 — Red Hat Bug Fix Advisory: httpd24 bug fix and enhancement update

httpd: mod_proxy_uwsgi buffer overflow httpd: mod_http2 concurrent pool usage

SUSE-SU-2020:2311-1 — Security update for apache2

Security update for apache2

UBUNTU-CVE-2020-11993

Affected: Ubuntu:18.04:LTS: apache2, Ubuntu:20.04:LTS: apache2

WID-SEC-W-2023-0063 — Juniper Junos Space: Mehrere Schwachstellen

Ein Angreifer aus dem angrenzenden Netzwerk oder ein entfernter anonymer, authentisierter oder lokaler Angreifer kann mehrere Schwachstellen in Juniper Junos Space ausnutzen, um Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszulösen, beliebigen Code auszuführen und seine Privilegien zu erweitern.