Apache2 - Out of Bound Write and Replay Attack Vulnerabilities
Summary
DLA-1389-1: apache2 - security update. Affects apache2 versions < 2.2.22-13+deb7u13. Fixed in 2.2.22-13+deb7u13. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Apache2 is a widely used open-source web server software that provides a secure and efficient platform for hosting websites. It supports various features and modules, including mod_authnz_ldap and mod_auth_digest, which handle LDAP authentication and HTTP Digest authentication, respectively. These modules are vulnerable to two distinct security issues.
Vulnerability Detail
The first vulnerability, identified as CVE-2017-15710, affects mod_authnz_ldap when configured with AuthLDAPCharsetConfig. An attacker can exploit this vulnerability by sending a crafted Accept-Language header, leading to an out-of-bound write and potentially causing a Denial of Service attack.
The second vulnerability, known as CVE-2018-1312, is related to the generation of HTTP Digest authentication challenges by mod_auth_digest. The nonce used to prevent reply attacks is not correctly generated using a pseudo-random seed. This flaw allows an attacker to replay HTTP requests across servers in a cluster that share a common Digest authentication configuration, without detection.
How To Fix
Minimum fixed version
2.2.22-13+deb7u13
This is the first release that contains the fix.
sudo apt-get install --only-upgrade apache2Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Conclusion
Upgrading the apache2 package to version 2.2.22-13+deb7u13 or later is crucial to mitigate the out-of-bound write and replay attack vulnerabilities. It is recommended to apply the security update promptly to ensure the continued security and stability of your Apache HTTP server. For further assistance or support in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for apache2 →
FAQ
Exploiting this vulnerability can lead to a Denial of Service attack, potentially causing the Apache HTTP server to crash.
By replaying HTTP requests across servers in a cluster, an attacker can bypass authentication and perform unauthorized actions.
No specific workarounds have been provided. It is recommended to apply the security update as soon as possible.
No, only Apache2 version 2.2.22-13+deb7u13 and earlier versions are affected. Upgrading to the latest version will mitigate the vulnerabilities.
You can find further information about Debian LTS security advisories, including how to apply updates and frequently asked questions, at the following link: https://wiki.debian.org/LTS
Related vulnerabilities
Recent vulnerabilities recorded for apache2.
