| Package | Affected versions | Patched versions |
|---|---|---|
| http server | ≥ 2.2.0, < 2.2.29≥ 2.4.1, < 2.4.10 | 2.2.292.4.10 |
| enterprise manager ops center | = 11.1.3= 12.1.4 | |
| http server | = 10.1.3.5.0= 11.1.1.7.0= 12.1.2.0= 12.1.3.0 | |
| secure global desktop | = 4.63= 4.71= 5.0= 5.1 | |
| jboss enterprise application platform | = 6.0.0= 6.4.0 |
Race condition in the mod_status module in the Apache HTTP Server before 2.4.10 allows remote attackers to cause a denial of service (heap-based buffer overflow), or possibly obtain sensitive credential information or execute arbitrary code, via a crafted request that triggers improper scoreboard handling within the status_handler function in modules/generators/mod_status.c and the lua_ap_scoreboard_worker function in modules/lua/lua_request.c.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free