According to its banner, the version of Apache running on the remote host is 2.4.x prior to 2.4.33. It is, therefore, affected by multiple vulnerabilities:

  - An out of bounds write vulnerability exists in mod_authnz_ldap     with AuthLDAPCharsetConfig enabled. An unauthenticated, remote     attacker can exploit this, via the Accept-Language header value,     to cause the application to stop responding. (CVE-2017-15710)  
  - An arbitrary file upload vulnerability exists in the FilesMatch     component where a malicious filename can be crafted to match the     expression check for a newline character. An unauthenticated,     remote attacker can exploit this, via newline character, to     upload arbitrary files on the remote host subject to the     privileges of the user. (CVE-2017-15715)

  - A session management vulnerability exists in the     mod_session component due to SessionEnv being enabled and     forwarding it's session data to the CGI Application. An     unauthenticated, remote attacker can exploit this, via     tampering the HTTP_SESSION and using a session header, to     influence content. (CVE-2018-1283)

  - An out of bounds access vulnerability exists when the size limit     is reached. An unauthenticated, remote attacker can exploit this,     to cause the Apache HTTP Server to crash. (CVE-2018-1301)

  - A write after free vulnerability exists in HTTP/2 stream due to     a NULL pointer being written to an area of freed memory. An     unauthenticated, remote attacker can exploit this to execute     arbitrary code. (CVE-2018-1302)   
  - An out of bounds read vulnerability exists in mod_cache_socache.
    An unauthenticated, remote attacker can exploit this, via a     specially crafted HTTP request header to cause the application     to stop responding. (CVE-2018-1303)

  - A weak digest vulnerability exists in the HTTP digest     authentication challenge.  An unauthenticated, remote attacker     can exploit this in a cluster of servers configured to use a     common digest authentication, to replay HTTP requests across     servers without being detected. (CVE-2018-1312)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2019-3745:01 advisory.

    * httpd: Improper handling of headers in mod_session can allow a remote user to modify session data for     CGI applications (CVE-2018-1283)
    * httpd: Out of bounds read in mod_cache_socache can allow a remote attacker to cause DoS (CVE-2018-1303)
    * httpd: mod_http2: Too much time allocated to workers, possibly leading to DoS (CVE-2018-1333)
    * httpd: DoS for HTTP/2 connections by continuous SETTINGS frames (CVE-2018-11763)
    * httpd: Out of bounds write in mod_authnz_ldap when using too small Accept-Language values     (CVE-2017-15710)
    * httpd:  bypass with a trailing newline in the file name (CVE-2017-15715)
    * httpd: Out of bounds access after failure in reading the HTTP request (CVE-2018-1301)
    * httpd: Weak Digest auth nonce generation in mod_auth_digest (CVE-2018-1312)
    * curl: Multiple security issues were fixed in httpd24-curl (CVE-2016-5419, CVE-2016-5420, CVE-2016-5421,     CVE-2016-7141, CVE-2016-7167, CVE-2016-8615, CVE-2016-8616, CVE-2016-8617, CVE-2016-8618, CVE-2016-8619,     CVE-2016-8620, CVE-2016-8621, CVE-2016-8622, CVE-2016-8623, CVE-2016-8624, CVE-2016-8625, CVE-2016-9586,     CVE-2017-1000100, CVE-2017-1000101, CVE-2017-1000254, CVE-2017-1000257, CVE-2017-7407, CVE-2017-8816,     CVE-2017-8817, CVE-2018-1000007, CVE-2018-1000120, CVE-2018-1000121, CVE-2018-1000122, CVE-2018-1000301,     CVE-2018-14618)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2020-639:02 advisory.

    * httpd: Improper handling of headers in mod_session can allow a remote user to modify session data for     CGI applications (CVE-2018-1283)
      * httpd: Out of bounds read in mod_cache_socache can allow a remote attacker to cause DoS     (CVE-2018-1303)
      * httpd: mod_rewrite configurations vulnerable to open redirect (CVE-2020-1927)
      * httpd:  bypass with a trailing newline in the file name (CVE-2017-15715)
      * httpd: mod_rewrite potential open redirect (CVE-2019-10098)
      * httpd: mod_proxy_ftp use of uninitialized value (CVE-2020-1934)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
122060	Apache 2.4.x < 2.4.33 Multiple Vulnerabilities	Nessus	Web Servers	2019/2/8	2022/4/11	critical
289425	MiracleLinux 4 : httpd24-nghttp2-1.7.1-7.AXS4, httpd24-curl-7.61.1-1.AXS4, httpd24-httpd-2.4.34-7.AXS4 (AXSA:2019-3745:01)	Nessus	Miracle Linux Local Security Checks	2026/1/16	2026/1/16	critical
294019	MiracleLinux 7 : httpd-2.4.6-95.0.1.el7.AXS7 (AXSA:2020-639:02)	Nessus	Miracle Linux Local Security Checks	2026/1/20	2026/1/21	high

检测

插件搜索

critical

critical

high