Advisories ยป MGASA-2015-0281

Updated apache package fixes security vulnerabilities

Publication date: 27 Jul 2015
Type: security
Affected Mageia releases : 4 , 5
CVE: CVE-2015-3183 , CVE-2015-3185

Description

The chunked transfer coding implementation in the Apache HTTP Server
before 2.4.14 does not properly parse chunk headers, which allows remote
attackers to conduct HTTP request smuggling attacks via a crafted request,
related to  mishandling of large chunk-size values and invalid
chunk-extension characters in modules/http/http_filters.c (CVE-2015-3183).

The ap_some_auth_required function in server/request.c in the Apache HTTP
Server 2.4.x before 2.4.14 does not consider that a Require directive may
be associated with an authorization setting rather than an authentication
setting, which allows remote attackers to bypass intended access
restrictions in opportunistic circumstances by leveraging the presence of
a module that relies on the 2.2 API behavior (CVE-2015-3185).
                

References

SRPMS

5/core

4/core