The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3937-1 advisory.

    Charles Fol discovered that the Apache HTTP Server incorrectly handled the scoreboard shared memory area.
    A remote attacker able to upload and run scripts could possibly use this issue to execute arbitrary code     with root privileges. (CVE-2019-0211)

    It was discovered that the Apache HTTP Server HTTP/2 module incorrectly handled certain requests. A remote     attacker could possibly use this issue to cause the server to consume resources, leading to a denial of     service. This issue only affected Ubuntu 18.04 LTS and Ubuntu 18.10. (CVE-2018-17189)

    It was discovered that the Apache HTTP Server incorrectly handled session expiry times. When used with     mod_session_cookie, this may result in the session expiry time to be ignored, contrary to expectations.
    (CVE-2018-17199)

    Craig Young discovered that the Apache HTTP Server HTTP/2 module incorrectly handled certain requests. A     remote attacker could possibly use this issue to cause the server to process requests incorrectly. This     issue only affected Ubuntu 18.04 LTS and Ubuntu 18.10. (CVE-2019-0196)

    Simon Kappel discovered that the Apache HTTP Server mod_auth_digest module incorrectly handled threads. A     remote attacker with valid credentials could possibly use this issue to authenticate using another     username, bypassing access control restrictions. (CVE-2019-0217)

    Bernhard Lorenz discovered that the Apache HTTP Server was inconsistent when processing requests     containing multiple consecutive slashes. This could lead to directives such as LocationMatch and     RewriteRule to perform contrary to expectations. (CVE-2019-0220)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

This update for apache2 fixes the following issues :

Security issues fixed :

CVE-2018-17189: Fixed a denial of service in mod_http2, via slow and unneeded request bodies (bsc#1122838)

CVE-2018-17199: Fixed that mod_session_cookie did not respect expiry time (bsc#1122839)

Non-security issue fixed: sysconfig.d is not created anymore if it already exists (bsc#1121086)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for apache2 fixes the following issues :

Security issues fixed :

  - CVE-2018-17189: Fixed a denial of service in mod_http2,     via slow and unneeded request bodies (bsc#1122838)

  - CVE-2018-17199: Fixed that mod_session_cookie did not     respect expiry time (bsc#1122839)

Non-security issue fixed :

  - sysconfig.d is not created anymore if it already exists     (bsc#1121086)

This update was imported from the SUSE:SLE-12-SP2:Update update project.

In Apache HTTP server by sending request bodies in a slow loris way to plain resources, the h2 stream for that request unnecessarily occupied a server thread cleaning up that incoming data. This affects only HTTP/2 (mod_http2) connections. (CVE-2018-17189)

A bug exists in the way mod_ssl handled client renegotiations. A remote attacker could send a carefully crafted request that would cause mod_ssl to enter a loop leading to a denial of service.
(CVE-2019-0190)

In Apache HTTP Server mod_session checks the session expiry time before decoding the session. This causes session expiry time to be ignored for mod_session_cookie sessions since the expiry time is loaded when the session is decoded. (CVE-2018-17199)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-4751 advisory.

    - Resolves: #1823263 (CVE-2020-1934) - CVE-2020-1934 httpd: mod_proxy_ftp use of       uninitialized value
    - Resolves: #1823259 - CVE-2020-1927 httpd:2.4/httpd: mod_rewrite configurations       vulnerable to open redirect
    - Resolves: #1747284 - CVE-2019-10098 httpd:2.4/httpd: mod_rewrite potential       open redirect
    - Resolves: #1747281 - CVE-2019-10092 httpd:2.4/httpd: limited cross-site       scripting in mod_proxy error page
    - Resolves: #1747291 - CVE-2019-10097 httpd:2.4/httpd: null-pointer dereference       in mod_remoteip
    - Resolves: #1869073 - CVE-2020-9490 httpd:2.4/mod_http2: httpd:
      Push diary crash on specifically crafted HTTP/2 header
    - Resolves: #1747289 - CVE-2019-10082 httpd:2.4/mod_http2: httpd:
      read-after-free in h2 connection shutdown
    - Resolves: #1696099 - CVE-2019-0197 httpd:2.4/mod_http2: httpd:
      mod_http2: possible crash on late upgrade
    - Resolves: #1696094 - CVE-2019-0196 httpd:2.4/mod_http2: httpd:
      mod_http2: read-after-free on a string compare
    - Resolves: #1677591 - CVE-2018-17189 httpd:2.4/mod_http2: httpd:
      mod_http2: DoS via slow, unneeded request bodies

    mod_md

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2020:4751 advisory.

  - In Apache HTTP server versions 2.4.37 and prior, by sending request bodies in a slow loris way to plain     resources, the h2 stream for that request unnecessarily occupied a server thread cleaning up that incoming     data. This affects only HTTP/2 (mod_http2) connections. (CVE-2018-17189)

  - A vulnerability was found in Apache HTTP Server 2.4.17 to 2.4.38. Using fuzzed network input, the http/2     request handling could be made to access freed memory in string comparison when determining the method of     a request and thus process the request incorrectly. (CVE-2019-0196)

  - A vulnerability was found in Apache HTTP Server 2.4.34 to 2.4.38. When HTTP/2 was enabled for a http: host     or H2Upgrade was enabled for h2 on a https: host, an Upgrade request from http/1.1 to http/2 that was not     the first request on a connection could lead to a misconfiguration and crash. Server that never enabled     the h2 protocol or that only enabled it for https: and did not set H2Upgrade on are unaffected by this     issue. (CVE-2019-0197)

  - HTTP/2 (2.4.20 through 2.4.39) very early pushes, for example configured with H2PushResource, could lead     to an overwrite of memory in the pushing request's pool, leading to crashes. The memory copied is that of     the configured push link header values, not data supplied by the client. (CVE-2019-10081)

  - In Apache HTTP Server 2.4.18-2.4.39, using fuzzed network input, the http/2 session handling could be made     to read memory after being freed, during connection shutdown. (CVE-2019-10082)

  - In Apache HTTP Server 2.4.0-2.4.39, a limited cross-site scripting issue was reported affecting the     mod_proxy error page. An attacker could cause the link on the error page to be malformed and instead point     to a page of their choice. This would only be exploitable where a server was set up with proxying enabled     but was misconfigured in such a way that the Proxy Error page was displayed. (CVE-2019-10092)

  - In Apache HTTP Server 2.4.32-2.4.39, when mod_remoteip was configured to use a trusted intermediary proxy     server using the PROXY protocol, a specially crafted PROXY header could trigger a stack buffer overflow     or NULL pointer deference. This vulnerability could only be triggered by a trusted proxy and not by     untrusted HTTP clients. (CVE-2019-10097)

  - In Apache HTTP server 2.4.0 to 2.4.39, Redirects configured with mod_rewrite that were intended to be     self-referential might be fooled by encoded newlines and redirect instead to an unexpected URL within the     request URL. (CVE-2019-10098)

  - In Apache HTTP Server 2.4.0 to 2.4.41, redirects configured with mod_rewrite that were intended to be     self-referential might be fooled by encoded newlines and redirect instead to an an unexpected URL within     the request URL. (CVE-2020-1927)

  - In Apache HTTP Server 2.4.0 to 2.4.41, mod_proxy_ftp may use uninitialized memory when proxying to a     malicious FTP server. (CVE-2020-1934)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2019-4423:01 advisory.

    * httpd: mod_session_cookie does not respect expiry time (CVE-2018-17199)
      * httpd: mod_auth_digest: access control bypass due to race condition (CVE-2019-0217)
      * httpd: null-pointer dereference in mod_remoteip (CVE-2019-10097)
      * httpd: mod_http2: DoS via slow, unneeded request bodies (CVE-2018-17189)
      * httpd: URL normalization inconsistency (CVE-2019-0220)
      * httpd: limited cross-site scripting in mod_proxy error page (CVE-2019-10092)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
123787	Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS : Apache HTTP Server vulnerabilities (USN-3937-1)	Nessus	Ubuntu Local Security Checks	2019/4/5	2025/9/3	high
122477	SUSE SLED15 / SLES15 Security Update : apache2 (SUSE-SU-2019:0504-1)	Nessus	SuSE Local Security Checks	2019/2/27	2021/1/13	high
122741	openSUSE Security Update : apache2 (openSUSE-2019-305)	Nessus	SuSE Local Security Checks	2019/3/11	2021/1/19	high
122758	Amazon Linux AMI : httpd24 (ALAS-2019-1166)	Nessus	Amazon Linux Local Security Checks	2019/3/12	2020/2/5	high
142762	Oracle Linux 8 : httpd:2.4 (ELSA-2020-4751)	Nessus	Oracle Linux Local Security Checks	2020/11/12	2024/11/1	critical
184538	Rocky Linux 8 : httpd:2.4 (RLSA-2020:4751)	Nessus	Rocky Linux Local Security Checks	2023/11/6	2023/11/7	critical
288903	MiracleLinux 4 : httpd24-1.1-19.AXS4, httpd24-httpd-2.4.25-9.AXS4.1, httpd24-nghttp2-1.7.1-8.AXS4 (AXSA:2019-4423:01)	Nessus	Miracle Linux Local Security Checks	2026/1/16	2026/1/17	high

检测

插件搜索

high

high

high

high

critical

critical

high