CVE-2018-1303

MEDIUM

Description

A specially crafted HTTP request header could have crashed the Apache HTTP Server prior to version 2.4.30 due to an out of bound read while preparing data to be cached in shared memory. It could be used as a Denial of Service attack against users of mod_cache_socache. The vulnerability is considered as low risk since mod_cache_socache is not widely used, mod_cache_disk is not concerned by this vulnerability.

References

http://www.openwall.com/lists/oss-security/2018/03/24/3

http://www.securityfocus.com/bid/103522

http://www.securitytracker.com/id/1040572

https://access.redhat.com/errata/RHSA-2018:3558

https://access.redhat.com/errata/RHSA-2019:0366

https://access.redhat.com/errata/RHSA-2019:0367

https://httpd.apache.org/security/vulnerabilities_24.html

https://lists.apache.org/thread.html/[email protected]%3Ccvs.httpd.apache.org%3E

https://lists.apache.org/thread.html/[email protected]%3Ccvs.httpd.apache.org%3E

https://lists.apache.org/thread.html/[email protected]%3Ccvs.httpd.apache.org%3E

https://lists.apache.org/thread.html/[email protected]%3Ccvs.httpd.apache.org%3E

https://lists.apache.org/thread.html/[email protected]%3Ccvs.httpd.apache.org%3E

https://lists.apache.org/thread.html/[email protected]%3Ccvs.httpd.apache.org%3E

https://lists.apache.org/thread.html/[email protected]%3Ccvs.httpd.apache.org%3E

https://lists.apache.org/thread.html/[email protected]%3Ccvs.httpd.apache.org%3E

https://security.netapp.com/advisory/ntap-20180601-0004/

https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03909en_us

https://usn.ubuntu.com/3627-1/

https://usn.ubuntu.com/3627-2/

https://www.debian.org/security/2018/dsa-4164

https://www.tenable.com/security/tns-2019-09

Details

Source: MITRE

Published: 2018-03-26

Updated: 2021-03-30

Type: CWE-125

Risk Information

CVSS v2.0

Base Score: 5

Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P

Impact Score: 2.9

Exploitability Score: 10

Severity: MEDIUM

CVSS v3.0

Base Score: 7.5

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Impact Score: 3.6

Exploitability Score: 3.9

Severity: HIGH

Tenable Plugins

View all (30 total)

IDNameProductFamilySeverity
147353NewStart CGSL CORE 5.04 / MAIN 5.04 : httpd Multiple Vulnerabilities (NS-SA-2021-0036)NessusNewStart CGSL Local Security Checks
medium
141711Scientific Linux Security Update : httpd on SL7.x x86_64 (20201001)NessusScientific Linux Local Security Checks
medium
141584CentOS 7 : httpd (CESA-2020:3958)NessusCentOS Local Security Checks
medium
141040RHEL 7 : httpd (RHSA-2020:3958)NessusRed Hat Local Security Checks
medium
124922EulerOS Virtualization 3.0.1.0 : httpd (EulerOS-SA-2019-1419)NessusHuawei Local Security Checks
high
122292RHEL 6 / 7 : Red Hat JBoss Core Services Apache HTTP Server 2.4.29 (RHSA-2019:0367)NessusRed Hat Local Security Checks
medium
122060Apache 2.4.x < 2.4.33 Multiple VulnerabilitiesNessusWeb Servers
medium
121934Photon OS 2.0: Httpd PHSA-2018-2.0-0039NessusPhotonOS Local Security Checks
high
121822Photon OS 1.0: Httpd PHSA-2018-1.0-0126NessusPhotonOS Local Security Checks
high
121275EulerOS Virtualization 2.5.1 : httpd (EulerOS-SA-2019-1015)NessusHuawei Local Security Checks
medium
98914Apache 2.4.x < 2.4.33 Multiple VulnerabilitiesWeb Application ScanningComponent Vulnerability
medium
120484Fedora 28 : httpd (2018-6744ca470d)NessusFedora Local Security Checks
medium
118251SUSE SLES12 Security Update : apache2 (SUSE-SU-2018:1161-2)NessusSuSE Local Security Checks
medium
111930Photon OS 1.0: Binutils / Httpd / Mercurial / Mysql / Net / Paramiko / Patch / Pycrypto / Python3 / Sqlite / Strongswan / Xerces PHSA-2018-1.0-0126 (deprecated)NessusPhotonOS Local Security Checks
high
111298Photon OS 2.0 : openjdk8 / httpd / librelp / zsh / libvirt (PhotonOS-PHSA-2018-2.0-0039) (deprecated)NessusPhotonOS Local Security Checks
high
111297Photon OS 2.0 : Zsh / Python3 / Xerces / Mercurial / Pmd / Pycrypto / Net / Python2 / Util / Mysql / Paramiko / Binutils / Patch / Sqlite (PhotonOS-PHSA-2018-2.0-0037) (deprecated)NessusPhotonOS Local Security Checks
high
110877EulerOS 2.0 SP3 : httpd (EulerOS-SA-2018-1213)NessusHuawei Local Security Checks
medium
110876EulerOS 2.0 SP2 : httpd (EulerOS-SA-2018-1212)NessusHuawei Local Security Checks
medium
109745Fedora 26 : httpd (2018-e6d9251471)NessusFedora Local Security Checks
medium
109664openSUSE Security Update : apache2 (openSUSE-2018-438)NessusSuSE Local Security Checks
medium
109598SUSE SLES12 Security Update : apache2 (SUSE-SU-2018:1161-1)NessusSuSE Local Security Checks
medium
109555Amazon Linux AMI : httpd24 (ALAS-2018-1004)NessusAmazon Linux Local Security Checks
medium
109466Ubuntu 18.04 LTS : Apache HTTP Server vulnerabilities (USN-3627-2)NessusUbuntu Local Security Checks
medium
109199Ubuntu 14.04 LTS / 16.04 LTS / 17.10 : Apache HTTP Server vulnerabilities (USN-3627-1)NessusUbuntu Local Security Checks
medium
108945SUSE SLES12 Security Update : apache2 (SUSE-SU-2018:0901-1)NessusSuSE Local Security Checks
medium
108876SUSE SLES12 Security Update : apache2 (SUSE-SU-2018:0879-1)NessusSuSE Local Security Checks
medium
108856Fedora 27 : httpd (2018-375e3244b6)NessusFedora Local Security Checks
medium
108816Debian DSA-4164-1 : apache2 - security updateNessusDebian Local Security Checks
medium
108758Apache 2.4.x < 2.4.33 Multiple Vulnerabilities (deprecated)NessusWeb Servers
medium
108626FreeBSD : apache -- multiple vulnerabilities (f38187e7-2f6e-11e8-8f07-b499baebfeaf)NessusFreeBSD Local Security Checks
medium