漏洞类别：Amazon Linux
漏洞等级： 
漏洞信息
<DIV ID="issue_overview"> Issue Overview:
The following security-related issues were fixed:
Padding oracle vulnerability in Apache mod_session_crypto (CVE-2016-0736 )
DoS vulnerability in mod_auth_digest (CVE-2016-2161 )
Apache HTTP request parsing whitespace defects (CVE-2016-8743 )
</DIV>
漏洞危害
Allows unauthorized disclosure of information; allows unauthorized modification; allows disruption of service.
解决方案
Please refer to Amazon advisory ALAS-2017-785 for affected packages and patching details, or update with your package manager.
Patch:
Following are links for downloading patches to fix the vulnerabilities:
ALAS-2017-785: Amazon Linux (httpd24 (2.4.25-1.68.amzn1) on noarch)
ALAS-2017-785: Amazon Linux (httpd24 (2.4.25-1.68.amzn1) on x86_64)
ALAS-2017-785: Amazon Linux (httpd24 (2.4.25-1.68.amzn1) on src)
ALAS-2017-785: Amazon Linux (httpd24 (2.4.25-1.68.amzn1) on i686)
0day
文章评论