CVE-2020-1934

In Apache HTTP Server 2.4.0 to 2.4.41, mod_proxy_ftp may use uninitialized memory when proxying to a malicious FTP server.

In Apache HTTP Server 2.4.0 to 2.4.41, mod_proxy_ftp may use uninitialized memory when proxying to a malicious FTP server.

The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server.

The following packages have been upgraded to a later upstream version: mod_http2 (1.15.7). (BZ#1814236)

Security Fix(es):

• httpd: memory corruption on early pushes (CVE-2019-10081)

• httpd: read-after-free in h2 connection shutdown (CVE-2019-10082)

• httpd: null-pointer dereference in mod_remoteip (CVE-2019-10097)

• httpd: mod_rewrite configurations vulnerable to open redirect (CVE-2020-1927)

• httpd: mod_http2: DoS via slow, unneeded request bodies (CVE-2018-17189)

• httpd: mod_http2: read-after-free on a string compare (CVE-2019-0196)

• httpd: mod_http2: possible crash on late upgrade (CVE-2019-0197)

• httpd: limited cross-site scripting in mod_proxy error page (CVE-2019-10092)

• httpd: mod_rewrite potential open redirect (CVE-2019-10098)

• httpd: mod_proxy_ftp use of uninitialized value (CVE-2020-1934)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 8.3 Release Notes linked from the References section.

In Apache HTTP Server 2.4.0 to 2.4.41, mod_proxy_ftp may use uninitialized memory when proxying to a malicious FTP server.

The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server.

The following packages have been upgraded to a later upstream version: mod_http2 (1.15.7). (BZ#1814236)

Security Fix(es):

• httpd: memory corruption on early pushes (CVE-2019-10081)

• httpd: read-after-free in h2 connection shutdown (CVE-2019-10082)

• httpd: null-pointer dereference in mod_remoteip (CVE-2019-10097)

• httpd: mod_rewrite configurations vulnerable to open redirect (CVE-2020-1927)

• httpd: mod_http2: DoS via slow, unneeded request bodies (CVE-2018-17189)

• httpd: mod_http2: read-after-free on a string compare (CVE-2019-0196)

• httpd: mod_http2: possible crash on late upgrade (CVE-2019-0197)

• httpd: limited cross-site scripting in mod_proxy error page (CVE-2019-10092)

• httpd: mod_rewrite potential open redirect (CVE-2019-10098)

• httpd: mod_proxy_ftp use of uninitialized value (CVE-2020-1934)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

In Apache HTTP Server 2.4.0 to 2.4.41, mod_proxy_ftp may use uninitialized memory when proxying to a malicious FTP server.

Updated apache packages fix security vulnerabilities:

In Apache HTTP Server 2.4.0 to 2.4.41, redirects configured with mod_rewrite that were intended to be self-referential might be fooled by encoded newlines and redirect instead to an unexpected URL within the request URL (CVE-2020-1927).

In Apache HTTP Server 2.4.0 to 2.4.41, mod_proxy_ftp may use uninitialized memory when proxying to a malicious FTP server (CVE-2020-1934).

This update for apache2 fixes the following issues:

• CVE-2020-1934: mod_proxy_ftp may use uninitialized memory when proxying to a malicious FTP server (bsc#1168404).
• CVE-2020-1927: mod_rewrite configurations vulnerable to open redirect (bsc#1168407).
• CVE-2020-1938: mod_proxy_ajp: Add 'secret' parameter to proxy workers to implement legacy AJP13 authentication (bsc#1169066).

This update was imported from the SUSE:SLE-15:Update update project.

This update for apache2 fixes the following issues:

• CVE-2020-1934: mod_proxy_ftp may use uninitialized memory when proxying to a malicious FTP server (bsc#1168404).
• CVE-2020-1927: mod_rewrite configurations vulnerable to open redirect (bsc#1168407).
• CVE-2020-1938: mod_proxy_ajp: Add 'secret' parameter to proxy workers to implement legacy AJP13 authentication (bsc#1169066).

This update for apache2 fixes the following issues:

• CVE-2020-1934: mod_proxy_ftp may use uninitialized memory when proxying to a malicious FTP server (bsc#1168404).
• CVE-2020-1927: mod_rewrite configurations vulnerable to open redirect (bsc#1168407).
• CVE-2020-1938: mod_proxy_ajp: Add 'secret' parameter to proxy workers to implement legacy AJP13 authentication (bsc#1169066).

This update for apache2 fixes the following issues:

• CVE-2020-1934: mod_proxy_ftp may use uninitialized memory when proxying to a malicious FTP server (bsc#1168404).
• CVE-2020-1927: mod_rewrite configurations vulnerable to open redirect (bsc#1168407).
• CVE-2020-1938: mod_proxy_ajp: Add 'secret' parameter to proxy workers to implement legacy AJP13 authentication (bsc#1169066).

This update for apache2 fixes the following issues:

• CVE-2020-1934: mod_proxy_ftp may use uninitialized memory when proxying to a malicious FTP server (bsc#1168404).
• CVE-2020-1938: mod_proxy_ajp: Add 'secret' parameter to proxy workers to implement legacy AJP13 authentication (bsc#1169066).

Fabrice Perez discovered that the Apache mod_rewrite module incorrectly handled certain redirects. A remote attacker could possibly use this issue to perform redirects to an unexpected URL. (CVE-2020-1927)

Chamal De Silva discovered that the Apache mod_proxy_ftp module incorrectly handled memory when proxying to a malicious FTP server. A remote attacker could possibly use this issue to obtain sensitive information. (CVE-2020-1934)

Felix Wilhelm discovered that the HTTP/2 implementation in Apache did not properly handle certain Cache-Digest headers. A remote attacker could possibly use this issue to cause Apache to crash, resulting in a denial of service. This issue only affected Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. (CVE-2020-9490)

Felix Wilhelm discovered that the Apache mod_proxy_uwsgi module incorrectly handled large headers. A remote attacker could use this issue to obtain sensitive information or possibly execute arbitrary code. This issue only affected Ubuntu 20.04 LTS. (CVE-2020-11984)

Felix Wilhelm discovered that the HTTP/2 implementation in Apache did not properly handle certain logging statements. A remote attacker could possibly use this issue to cause Apache to crash, resulting in a denial of service. This issue only affected Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. (CVE-2020-11993)