USN-6510-1: Apache HTTP Server vulnerability
23 November 2023
Apache HTTP Server could be made to crash if it received a specially crafted request.
Releases
Packages
- apache2 - Apache HTTP server
Details
David Shoon discovered that the Apache HTTP Server mod_macro module
incorrectly handled certain memory operations. A remote attacker could
possibly use this issue to cause the server to crash, resulting in a denial
of service.
Update instructions
The problem can be corrected by updating your system to the following package versions:
Ubuntu 18.04
-
apache2
-
2.4.29-1ubuntu4.27+esm1
Available with Ubuntu Pro
Ubuntu 16.04
-
apache2
-
2.4.18-2ubuntu3.17+esm11
Available with Ubuntu Pro
Ubuntu 14.04
-
apache2
-
2.4.7-1ubuntu4.22+esm9
Available with Ubuntu Pro
In general, a standard system update will make all the necessary changes.