USN-4458-1: Apache HTTP Server vulnerabilities

13 August 2020

Several security issues were fixed in Apache HTTP Server.

Releases

Packages

Details

Fabrice Perez discovered that the Apache mod_rewrite module incorrectly
handled certain redirects. A remote attacker could possibly use this issue
to perform redirects to an unexpected URL. (CVE-2020-1927)

Chamal De Silva discovered that the Apache mod_proxy_ftp module incorrectly
handled memory when proxying to a malicious FTP server. A remote attacker
could possibly use this issue to obtain sensitive information.
(CVE-2020-1934)

Felix Wilhelm discovered that the HTTP/2 implementation in Apache did not
properly handle certain Cache-Digest headers. A remote attacker could
possibly use this issue to cause Apache to crash, resulting in a denial of
service. This issue only affected Ubuntu 18.04 LTS and Ubuntu 20.04 LTS.
(CVE-2020-9490)

Felix Wilhelm discovered that the Apache mod_proxy_uwsgi module incorrectly
handled large headers. A remote attacker could use this issue to obtain
sensitive information or possibly execute arbitrary code. This issue only
affected Ubuntu 20.04 LTS. (CVE-2020-11984)

Felix Wilhelm discovered that the HTTP/2 implementation in Apache did not
properly handle certain logging statements. A remote attacker could
possibly use this issue to cause Apache to crash, resulting in a denial of
service. This issue only affected Ubuntu 18.04 LTS and Ubuntu 20.04 LTS.
(CVE-2020-11993)

Update instructions

The problem can be corrected by updating your system to the following package versions:

Ubuntu 20.04
Ubuntu 18.04
Ubuntu 16.04

In general, a standard system update will make all the necessary changes.

Related notices

  • USN-5054-1: libapache2-mod-proxy-uwsgi, uwsgi, uwsgi-plugin-glusterfs, uwsgi-plugin-python, uwsgi-plugin-xslt, uwsgi-plugin-ring-openjdk-8, uwsgi-plugin-alarm-xmpp, uwsgi-plugin-jvm-openjdk-8, uwsgi-plugin-graylog2, uwsgi-src, uwsgi-plugin-greenlet-python, uwsgi-plugin-sqlite3, uwsgi-plugin-emperor-pg, uwsgi-plugin-tornado-python, uwsgi-plugin-mono, uwsgi-dev, uwsgi-plugins-all, uwsgi-extra, uwsgi-plugin-geoip, uwsgi-plugin-fiber, libapache2-mod-uwsgi, uwsgi-plugin-lua5.1, python3-uwsgidecorators, libapache2-mod-ruwsgi, uwsgi-plugin-gccgo, uwsgi-plugin-rados, uwsgi-emperor, uwsgi-app-integration-plugins, uwsgi-plugin-ldap, uwsgi-plugin-router-access, uwsgi-plugin-asyncio-python3, uwsgi-plugin-rbthreads, uwsgi-plugin-gevent-python, uwsgi-core, uwsgi-plugin-alarm-curl, uwsgi-plugin-psgi, uwsgi-plugin-lua5.2, uwsgi-plugin-rack-ruby2.5, uwsgi-plugin-python3, uwsgi-plugin-jwsgi-openjdk-8, uwsgi-plugin-servlet-openjdk-8, uwsgi-plugin-curl-cron, uwsgi-infrastructure-plugins, python-uwsgidecorators, uwsgi-plugin-asyncio-python