| Package | Affected versions | Patched versions |
|---|---|---|
| http server | = 2.4.33= 2.4.34= 2.4.35= 2.4.37= 2.4.38 | |
| communications element manager | = 8.0.0= 8.1.0= 8.1.1= 8.2.0 | |
| communications session report manager | = 8.1.1= 8.2.0= 8.2.1 | |
| communications session route manager | = 8.1.1= 8.2.0= 8.2.1 | |
| enterprise manager ops center | = 12.3.3= 12.4.0 | |
| http server | = 12.2.1.4.0 | |
| instantis enterprisetrack | ≥ 17.1, ≤ 17.3 | |
| retail xstore point of service | = 7.1 |
In Apache HTTP Server 2.4.32-2.4.39, when mod_remoteip was configured to use a trusted intermediary proxy server using the "PROXY" protocol, a specially crafted PROXY header could trigger a stack buffer overflow or NULL pointer deference. This vulnerability could only be triggered by a trusted proxy and not by untrusted HTTP clients.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free