USN-6510-1: Apache HTTP Server vulnerability
23 November 2023
Apache HTTP Server could be made to crash if it received a specially crafted request.
Releases
Packages
- apache2 - Apache HTTP server
Details
David Shoon discovered that the Apache HTTP Server mod_macro module
incorrectly handled certain memory operations. A remote attacker could
possibly use this issue to cause the server to crash, resulting in a denial
of service.
Update instructions
The problem can be corrected by updating your system to the following package versions:
Ubuntu 18.04
-
apache2
-
2.4.29-1ubuntu4.27+esm1
Available with Ubuntu Pro
Ubuntu 16.04
-
apache2
-
2.4.18-2ubuntu3.17+esm11
Available with Ubuntu Pro
Ubuntu 14.04
-
apache2
-
2.4.7-1ubuntu4.22+esm9
Available with Ubuntu Pro
In general, a standard system update will make all the necessary changes.
References
Related notices
- USN-6506-1: apache2-suexec-custom, libapache2-mod-proxy-uwsgi, apache2-utils, libapache2-mod-md, apache2-data, apache2, apache2-ssl-dev, apache2-suexec-pristine, apache2-dev, apache2-doc, apache2-bin