Family: Gentoo Local Security Checks --> Category: infos
[GLSA-200604-08] libapreq2: Denial of Service vulnerability Vulnerability Scan
Vulnerability Scan Summary
libapreq2: Denial of Service vulnerability
Detailed Explanation for this Vulnerability Test
The remote host is affected by the vulnerability described in GLSA-200604-08
(libapreq2: Denial of Service vulnerability)
A vulnerability has been reported in the apreq_parse_headers() and
apreq_parse_urlencoded() functions of Apache2::Request.
A remote attacker could possibly exploit the vulnerability to
cause a Denial of Service by CPU consumption.
There is no known workaround at this time.
All libapreq2 users should upgrade to the latest version:
# emerge --sync
# emerge --ask --oneshot --verbose ">=www-apache/libapreq2-2.07"
Threat Level: Medium
Click HERE for more information and discussions on this network vulnerability scan.