=========================================================================
\nUbuntu Security Notice USN-5487-1
\nJune 21, 2022<\/p>\n
apache2 vulnerabilities
\n=========================================================================
\nA security issue affects these releases of Ubuntu and its derivatives:<\/p>\n
– Ubuntu 22.04 LTS
\n– Ubuntu 21.10
\n– Ubuntu 20.04 LTS
\n– Ubuntu 18.04 LTS
\n– Ubuntu 16.04 ESM
\n– Ubuntu 14.04 ESM<\/p>\n
Summary:<\/p>\n
Several security issues were fixed in Apache HTTP Server.<\/p>\n
Software Description:
\n– apache2: Apache HTTP server<\/p>\n
Details:<\/p>\n
It was discovered that Apache HTTP Server mod_proxy_ajp incorrectly handled
\ncertain crafted request. A remote attacker could possibly use this issue to
\nperform an HTTP Request Smuggling attack. (CVE-2022-26377)<\/p>\n
It was discovered that Apache HTTP Server incorrectly handled certain
\nrequest. An attacker could possibly use this issue to cause a denial
\nof service. (CVE-2022-28614)<\/p>\n
It was discovered that Apache HTTP Server incorrectly handled certain request.
\nAn attacker could possibly use this issue to cause a crash or expose
\nsensitive information. (CVE-2022-28615)<\/p>\n
It was discovered that Apache HTTP Server incorrectly handled certain request.
\nAn attacker could possibly use this issue to cause a denial of service.
\n(CVE-2022-29404)<\/p>\n
It was discovered that Apache HTTP Server incorrectly handled certain
\nrequest. An attacker could possibly use this issue to cause a crash.
\n(CVE-2022-30522)<\/p>\n
It was discovered that Apache HTTP Server incorrectly handled certain request.
\nAn attacker could possibly use this issue to execute arbitrary code or cause
\na crash. (CVE-2022-30556)<\/p>\n
It was discovered that Apache HTTP Server incorrectly handled certain request.
\nAn attacker could possibly use this issue to bypass IP based authentication.
\n(CVE-2022-31813)<\/p>\n
Update instructions:<\/p>\n
The problem can be corrected by updating your system to the following
\npackage versions:<\/p>\n
Ubuntu 22.04 LTS:
\napache2 2.4.52-1ubuntu4.1
\napache2-bin 2.4.52-1ubuntu4.1<\/p>\n
Ubuntu 21.10:
\napache2 2.4.48-3.1ubuntu3.5
\napache2-bin 2.4.48-3.1ubuntu3.5<\/p>\n
Ubuntu 20.04 LTS:
\napache2 2.4.41-4ubuntu3.12
\napache2-bin 2.4.41-4ubuntu3.12<\/p>\n
Ubuntu 18.04 LTS:
\napache2 2.4.29-1ubuntu4.24
\napache2-bin 2.4.29-1ubuntu4.24<\/p>\n
Ubuntu 16.04 ESM:
\napache2 2.4.18-2ubuntu3.17+esm6
\napache2-bin 2.4.18-2ubuntu3.17+esm6<\/p>\n
Ubuntu 14.04 ESM:
\napache2 2.4.7-1ubuntu4.22+esm5
\napache2-bin 2.4.7-1ubuntu4.22+esm5<\/p>\n
In general, a standard system update will make all the necessary changes.<\/p>\n
References:
\nhttps:\/\/ubuntu.com\/security\/notices\/USN-5487-1
\nCVE-2022-26377, CVE-2022-28614, CVE-2022-28615, CVE-2022-29404,
\nCVE-2022-30522, CVE-2022-30556, CVE-2022-31813<\/p>\n
Package Information:
\nhttps:\/\/launchpad.net\/ubuntu\/+source\/apache2\/2.4.52-1ubuntu4.1
\nhttps:\/\/launchpad.net\/ubuntu\/+source\/apache2\/2.4.48-3.1ubuntu3.5
\nhttps:\/\/launchpad.net\/ubuntu\/+source\/apache2\/2.4.41-4ubuntu3.12
\nhttps:\/\/launchpad.net\/ubuntu\/+source\/apache2\/2.4.29-1ubuntu4.24<\/p>\n","protected":false},"excerpt":{"rendered":"
========================================================================= Ubuntu Security Notice USN-5487-1 June 21, 2022 apache2 vulnerabilities ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: – Ubuntu 22.04 LTS – Ubuntu 21.10 – Ubuntu 20.04 LTS – Ubuntu 18.04 LTS – Ubuntu 16.04 ESM – Ubuntu 14.04 ESM Summary: Several security issues were fixed in Apache HTTP Server. …<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[26],"tags":[],"class_list":["post-25991","post","type-post","status-publish","format-standard","hentry","category-vulnerability"],"_links":{"self":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts\/25991","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/comments?post=25991"}],"version-history":[{"count":0,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts\/25991\/revisions"}],"wp:attachment":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/media?parent=25991"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/categories?post=25991"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/tags?post=25991"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}