|
|
Family: Gentoo Local Security Checks --> Category: infos
[GLSA-200604-08] libapreq2: Denial of Service vulnerability Vulnerability Scan
Vulnerability Scan Summary
libapreq2: Denial of Service vulnerability
Detailed Explanation for this Vulnerability Test
The remote host is affected by the vulnerability described in GLSA-200604-08
(libapreq2: Denial of Service vulnerability)
A vulnerability has been reported in the apreq_parse_headers() and
apreq_parse_urlencoded() functions of Apache2::Request.
Impact
A remote attacker could possibly exploit the vulnerability to
cause a Denial of Service by CPU consumption.
Workaround
There is no known workaround at this time.
References:
http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0042
http://svn.apache.org/viewcvs.cgi/httpd/apreq/tags/v2_07/CHANGES?rev=376998&view=markup
Solution:
All libapreq2 users should upgrade to the latest version:
# emerge --sync
# emerge --ask --oneshot --verbose ">=www-apache/libapreq2-2.07"
Threat Level: Medium
Click HERE for more information and discussions on this network vulnerability scan.
|
