USN-6506-1

Dashboard / Vulnerabilities / USN-6506-1

USN-6506-1

Summary: apache2 vulnerabilities

Details: David Shoon discovered that the Apache HTTP Server mod_macro module incorrectly handled certain memory operations. A remote attacker could possibly use this issue to cause the server to crash, resulting in a denial of service. (CVE-2023-31122) Prof. Sven Dietrich, Isa Jafarov, Prof. Heejo Lee, and Choongin Lee discovered that the Apache HTTP Server incorrectly handled certain HTTP/2 connections. A remote attacker could possibly use this issue to cause the server to consume resources, leading to a denial of service. This issue only affected Ubuntu 23.04, and Ubuntu 23.10. (CVE-2023-43622) Will Dormann and David Warren discovered that the Apache HTTP Server incorrectly handled memory when handling HTTP/2 connections. A remote attacker could possibly use this issue to cause the server to consume resources, leading to a denial of service. (CVE-2023-45802)

References: https://ubuntu.com/security/notices/USN-6506-1, https://ubuntu.com/security/CVE-2023-31122, https://ubuntu.com/security/CVE-2023-43622, https://ubuntu.com/security/CVE-2023-45802