USN-2299-1

Dashboard / Vulnerabilities / USN-2299-1

USN-2299-1

Summary: apache2 vulnerabilities

Details: Marek Kroemeke discovered that the mod_proxy module incorrectly handled certain requests. A remote attacker could use this issue to cause the server to stop responding, leading to a denial of service. This issue only affected Ubuntu 14.04 LTS. (CVE-2014-0117) Giancarlo Pellegrino and Davide Balzarotti discovered that the mod_deflate module incorrectly handled body decompression. A remote attacker could use this issue to cause resource consumption, leading to a denial of service. (CVE-2014-0118) Marek Kroemeke and others discovered that the mod_status module incorrectly handled certain requests. A remote attacker could use this issue to cause the server to stop responding, leading to a denial of service, or possibly execute arbitrary code. (CVE-2014-0226) Rainer Jung discovered that the mod_cgid module incorrectly handled certain scripts. A remote attacker could use this issue to cause the server to stop responding, leading to a denial of service. (CVE-2014-0231)

References: https://ubuntu.com/security/notices/USN-2299-1, https://ubuntu.com/security/CVE-2014-0117, https://ubuntu.com/security/CVE-2014-0118, https://ubuntu.com/security/CVE-2014-0226, https://ubuntu.com/security/CVE-2014-0231