You are viewing a plain text version of this content. The canonical link for it is here.
Posted to cvs@httpd.apache.org by gi...@apache.org on 2023/10/19 09:27:25 UTC
[httpd-site] branch asf-site updated: Automatic Site Publish by Buildbot
This is an automated email from the ASF dual-hosted git repository.
git-site-role pushed a commit to branch asf-site
in repository https://gitbox.apache.org/repos/asf/httpd-site.git
The following commit(s) were added to refs/heads/asf-site by this push:
new 2f61ede Automatic Site Publish by Buildbot
2f61ede is described below
commit 2f61ede2cc9e97e83f173356a3c5919bda9c16a6
Author: buildbot <us...@infra.apache.org>
AuthorDate: Thu Oct 19 09:27:22 2023 +0000
Automatic Site Publish by Buildbot
---
output/doap.rdf | 4 +-
output/download.html | 24 +--
output/index.html | 8 +-
output/security/json/CVE-2023-31122.json | 98 ++++++++++
output/security/json/CVE-2023-43622.json | 108 ++++++++++
output/security/json/CVE-2023-45802.json | 98 ++++++++++
output/security/vulnerabilities-httpd.json | 304 +++++++++++++++++++++++++++++
output/security/vulnerabilities_24.html | 35 ++++
8 files changed, 661 insertions(+), 18 deletions(-)
diff --git a/output/doap.rdf b/output/doap.rdf
index 05c81a0..abbd202 100644
--- a/output/doap.rdf
+++ b/output/doap.rdf
@@ -38,8 +38,8 @@
<release>
<Version>
<name>Recommended current 2.4 release</name>
- <created>2023-04-06</created>
- <revision>2.4.57</revision>
+ <created>2023-10-19</created>
+ <revision>2.4.58</revision>
</Version>
</release>
diff --git a/output/download.html b/output/download.html
index fee15cb..117b94c 100644
--- a/output/download.html
+++ b/output/download.html
@@ -100,33 +100,33 @@ families of releases, are available from the
<a href="//httpd.apache.org/docs/current/platform/windows.html#down">a number of third party vendors</a>.</p>
<p>Stable Release - Latest Version:</p>
<ul>
-<li><a href="#apache24">2.4.57</a> (released 2023-04-06)</li>
+<li><a href="#apache24">2.4.58</a> (released 2023-10-19)</li>
</ul>
<p>If you are downloading the Win32 distribution, please read these <a href="[preferred]httpd/binaries/win32/README.html">important
notes</a>.</p>
-<h1 id="apache24">Apache HTTP Server 2.4.57 (httpd): 2.4.57 is the latest available version <span>2023-04-06</span><a class="headerlink" href="#apache24" title="Permalink">¶</a></h1>
+<h1 id="apache24">Apache HTTP Server 2.4.58 (httpd): 2.4.58 is the latest available version <span>2023-10-19</span><a class="headerlink" href="#apache24" title="Permalink">¶</a></h1>
<p>The Apache HTTP Server Project is pleased to
<a href="//downloads.apache.org/httpd/Announcement2.4.txt">announce</a> the
-release of version 2.4.57 of the Apache HTTP Server ("Apache" and "httpd").
+release of version 2.4.58 of the Apache HTTP Server ("Apache" and "httpd").
This version of Apache is our latest GA release of the new generation 2.4.x
branch of Apache HTTPD and represents fifteen years of innovation by the
project, and is recommended over all previous releases!</p>
<p>For details, see the <a href="//downloads.apache.org/httpd/Announcement2.4.html">Official
Announcement</a> and
the <a href="[preferred]httpd/CHANGES_2.4">CHANGES_2.4</a> and
-<a href="[preferred]httpd/CHANGES_2.4.57">CHANGES_2.4.57</a> lists.</p>
+<a href="[preferred]httpd/CHANGES_2.4.58">CHANGES_2.4.58</a> lists.</p>
<ul>
<li>
-<p>Source: <a href="[preferred]httpd/httpd-2.4.57.tar.bz2">httpd-2.4.57.tar.bz2</a>
-[ <a href="https://downloads.apache.org/httpd/httpd-2.4.57.tar.bz2.asc">PGP</a> ] [
-<a href="https://downloads.apache.org/httpd/httpd-2.4.57.tar.bz2.sha256">SHA256</a> ] [
-<a href="https://downloads.apache.org/httpd/httpd-2.4.57.tar.bz2.sha512">SHA512</a> ]</p>
+<p>Source: <a href="[preferred]httpd/httpd-2.4.58.tar.bz2">httpd-2.4.58.tar.bz2</a>
+[ <a href="https://downloads.apache.org/httpd/httpd-2.4.58.tar.bz2.asc">PGP</a> ] [
+<a href="https://downloads.apache.org/httpd/httpd-2.4.58.tar.bz2.sha256">SHA256</a> ] [
+<a href="https://downloads.apache.org/httpd/httpd-2.4.58.tar.bz2.sha512">SHA512</a> ]</p>
</li>
<li>
-<p>Source: <a href="[preferred]httpd/httpd-2.4.57.tar.gz">httpd-2.4.57.tar.gz</a> [
-<a href="https://downloads.apache.org/httpd/httpd-2.4.57.tar.gz.asc">PGP</a> ] [
-<a href="https://downloads.apache.org/httpd/httpd-2.4.57.tar.gz.sha256">SHA256</a> ] [
-<a href="https://downloads.apache.org/httpd/httpd-2.4.57.tar.gz.sha512">SHA512</a> ]</p>
+<p>Source: <a href="[preferred]httpd/httpd-2.4.58.tar.gz">httpd-2.4.58.tar.gz</a> [
+<a href="https://downloads.apache.org/httpd/httpd-2.4.58.tar.gz.asc">PGP</a> ] [
+<a href="https://downloads.apache.org/httpd/httpd-2.4.58.tar.gz.sha256">SHA256</a> ] [
+<a href="https://downloads.apache.org/httpd/httpd-2.4.58.tar.gz.sha512">SHA512</a> ]</p>
</li>
<li>
<p><a href="[preferred]httpd/patches/">Security and official patches</a></p>
diff --git a/output/index.html b/output/index.html
index 68cb1bd..a1d1bf0 100644
--- a/output/index.html
+++ b/output/index.html
@@ -96,16 +96,16 @@ standards.</p>
April 1996. It has celebrated its 25th birthday as a project in February 2020.</p>
<p>The Apache HTTP Server is a project of <a href="http://www.apache.org/">The Apache Software
Foundation</a>.</p>
-<h1 id="apache-httpd-2457-released-2023-04-06">Apache httpd 2.4.57 Released <span>2023-04-06</span><a class="headerlink" href="#apache-httpd-2457-released-2023-04-06" title="Permalink">¶</a></h1>
+<h1 id="apache-httpd-2458-released-2023-10-19">Apache httpd 2.4.58 Released <span>2023-10-19</span><a class="headerlink" href="#apache-httpd-2458-released-2023-10-19" title="Permalink">¶</a></h1>
<p>The Apache Software Foundation and the Apache HTTP Server Project are
pleased to
<a href="http://downloads.apache.org/httpd/Announcement2.4.html">announce</a> the
-release of version 2.4.57 of the Apache HTTP Server ("httpd").</p>
+release of version 2.4.58 of the Apache HTTP Server ("httpd").</p>
<p>This latest release from the 2.4.x stable branch represents the best available
version of Apache HTTP Server.</p>
<p>Apache HTTP Server version 2.<span>4</span>.43 or newer is required in order to operate a TLS 1.3 web server with OpenSSL 1.1.1.</p>
-<p class="centered"><a href="download.cgi#apache24">Download</a> | <a href="http://downloads.apache.org/httpd/CHANGES_2.4.57">ChangeLog for
-2.4.57</a> | <a href="http://downloads.apache.org/httpd/CHANGES_2.4">Complete ChangeLog for
+<p class="centered"><a href="download.cgi#apache24">Download</a> | <a href="http://downloads.apache.org/httpd/CHANGES_2.4.58">ChangeLog for
+2.4.58</a> | <a href="http://downloads.apache.org/httpd/CHANGES_2.4">Complete ChangeLog for
2.4</a> | <a href="docs/trunk/new_features_2_4.html">New Features in httpd
2.4</a></p>
<h1 id="apache-httpd-22-end-of-life-2018-01-01">Apache httpd 2.2 End-of-Life <span>2018-01-01</span><a class="headerlink" href="#apache-httpd-22-end-of-life-2018-01-01" title="Permalink">¶</a></h1>
diff --git a/output/security/json/CVE-2023-31122.json b/output/security/json/CVE-2023-31122.json
new file mode 100644
index 0000000..ac0bce4
--- /dev/null
+++ b/output/security/json/CVE-2023-31122.json
@@ -0,0 +1,98 @@
+{
+ "cveMetadata": {
+ "cveId": "CVE-2023-31122",
+ "assignerOrgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
+ "serial": 1,
+ "state": "PUBLISHED"
+ },
+ "CNA_private": {
+ "emailed": null,
+ "projecturl": null,
+ "owner": "httpd",
+ "userslist": "users@httpd.apache.org",
+ "state": "DRAFT",
+ "todo": [],
+ "type": "unsure"
+ },
+ "containers": {
+ "cna": {
+ "providerMetadata": {
+ "orgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09"
+ },
+ "title": "mod_macro buffer over-read",
+ "problemTypes": [
+ {
+ "descriptions": [
+ {
+ "description": "CWE-125 Out-of-bounds Read",
+ "lang": "en",
+ "cweId": "CWE-125",
+ "type": "CWE"
+ }
+ ]
+ }
+ ],
+ "source": {
+ "discovery": "UNKNOWN"
+ },
+ "affected": [
+ {
+ "vendor": "Apache Software Foundation",
+ "product": "Apache HTTP Server",
+ "versions": [
+ {
+ "status": "affected",
+ "version": "0",
+ "lessThanOrEqual": "2.4.57",
+ "versionType": "semver"
+ }
+ ],
+ "defaultStatus": "unaffected"
+ }
+ ],
+ "descriptions": [
+ {
+ "value": "Out-of-bounds Read vulnerability in mod_macro of Apache HTTP Server.This issue affects Apache HTTP Server: through 2.4.57.\n\n",
+ "lang": "en",
+ "supportingMedia": [
+ {
+ "type": "text/html",
+ "base64": false,
+ "value": "Out-of-bounds Read vulnerability in mod_macro of Apache HTTP Server.<p>This issue affects Apache HTTP Server: through 2.4.57.</p>"
+ }
+ ]
+ }
+ ],
+ "references": [],
+ "metrics": [
+ {
+ "other": {
+ "type": "Textual description of severity",
+ "content": {
+ "text": "low"
+ }
+ }
+ }
+ ],
+ "credits": [
+ {
+ "lang": "en",
+ "value": "David Shoon (github/davidshoon)",
+ "type": "finder"
+ }
+ ],
+ "x_generator": {
+ "engine": "Vulnogram 0.1.0-dev"
+ },
+ "timeline": [
+ {
+ "lang": "eng",
+ "time": "2023-10-19",
+ "value": "2.4.58 released"
+ }
+ ]
+ }
+ },
+ "dataType": "CVE_RECORD",
+ "dataVersion": "5.0"
+}
diff --git a/output/security/json/CVE-2023-43622.json b/output/security/json/CVE-2023-43622.json
new file mode 100644
index 0000000..8c23d2c
--- /dev/null
+++ b/output/security/json/CVE-2023-43622.json
@@ -0,0 +1,108 @@
+{
+ "containers": {
+ "cna": {
+ "affected": [
+ {
+ "defaultStatus": "unaffected",
+ "product": "Apache HTTP Server",
+ "vendor": "Apache Software Foundation",
+ "versions": [
+ {
+ "lessThanOrEqual": "2.4.57",
+ "status": "affected",
+ "version": "2.4.55",
+ "versionType": "semver"
+ }
+ ]
+ }
+ ],
+ "credits": [
+ {
+ "lang": "en",
+ "type": "finder",
+ "value": "Prof. Sven Dietrich (City University of New York)"
+ },
+ {
+ "lang": "en",
+ "type": "finder",
+ "value": "Isa Jafarov (City University of New York)"
+ },
+ {
+ "lang": "en",
+ "type": "finder",
+ "value": "Prof. Heejo Lee (Korea University)"
+ },
+ {
+ "lang": "en",
+ "type": "finder",
+ "value": "Choongin Lee (Korea University)"
+ }
+ ],
+ "descriptions": [
+ {
+ "lang": "en",
+ "supportingMedia": [
+ {
+ "base64": false,
+ "type": "text/html",
+ "value": "An attacker, opening a HTTP/2 connection with an initial window size of 0, was able to block handling of that connection indefinitely in Apache HTTP Server. This could be used to exhaust worker resources in the server, similar to the well known \"slow loris\" attack pattern.<br><p>This has been fixed in version 2.4.58, so that such connection are terminated properly after the configured connection timeout.</p><p>This issue affects Apache HTTP Server: from 2.4.55 t [...]
+ }
+ ],
+ "value": "An attacker, opening a HTTP/2 connection with an initial window size of 0, was able to block handling of that connection indefinitely in Apache HTTP Server. This could be used to exhaust worker resources in the server, similar to the well known \"slow loris\" attack pattern.\nThis has been fixed in version 2.4.58, so that such connection are terminated properly after the configured connection timeout.\n\nThis issue affects Apache HTTP Server: from 2.4.55 through 2.4.5 [...]
+ }
+ ],
+ "metrics": [
+ {
+ "other": {
+ "content": {
+ "text": "low"
+ },
+ "type": "Textual description of severity"
+ }
+ }
+ ],
+ "problemTypes": [
+ {
+ "descriptions": [
+ {
+ "cweId": "CWE-400",
+ "description": "CWE-400 Uncontrolled Resource Consumption",
+ "lang": "en",
+ "type": "CWE"
+ }
+ ]
+ }
+ ],
+ "providerMetadata": {
+ "orgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09"
+ },
+ "source": {
+ "discovery": "EXTERNAL"
+ },
+ "timeline": [
+ {
+ "lang": "en",
+ "time": "2023-09-15T09:51:00.000Z",
+ "value": "reported"
+ },
+ {
+ "lang": "eng",
+ "time": "2023-10-19",
+ "value": "2.4.58 released"
+ }
+ ],
+ "title": "Apache HTTP Server: DoS in HTTP/2 with initial windows size 0",
+ "x_generator": {
+ "engine": "Vulnogram 0.1.0-dev"
+ }
+ }
+ },
+ "cveMetadata": {
+ "assignerOrgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
+ "cveId": "CVE-2023-43622",
+ "serial": 1,
+ "state": "PUBLISHED"
+ },
+ "dataType": "CVE_RECORD",
+ "dataVersion": "5.0"
+}
diff --git a/output/security/json/CVE-2023-45802.json b/output/security/json/CVE-2023-45802.json
new file mode 100644
index 0000000..519971d
--- /dev/null
+++ b/output/security/json/CVE-2023-45802.json
@@ -0,0 +1,98 @@
+{
+ "containers": {
+ "cna": {
+ "affected": [
+ {
+ "defaultStatus": "unaffected",
+ "product": "Apache HTTP Server",
+ "vendor": "Apache Software Foundation",
+ "versions": [
+ {
+ "lessThanOrEqual": "2.4.57",
+ "status": "affected",
+ "version": "2.4.17",
+ "versionType": "semver"
+ }
+ ]
+ }
+ ],
+ "credits": [
+ {
+ "lang": "en",
+ "type": "finder",
+ "value": "Will Dormann of Vul Labs"
+ },
+ {
+ "lang": "en",
+ "type": "finder",
+ "value": "David Warren of Vul Labs"
+ }
+ ],
+ "descriptions": [
+ {
+ "lang": "en",
+ "supportingMedia": [
+ {
+ "base64": false,
+ "type": "text/html",
+ "value": "When a HTTP/2 stream was reset (RST frame) by a client, there was a time window were the request's memory resources were not reclaimed immediately. Instead, de-allocation was deferred to connection close. A client could send new requests and resets, keeping the connection busy and open and causing the memory footprint to keep on growing. On connection close, all resources were reclaimed, but the process might run out of memory before that.<br><br>This was found by [...]
+ }
+ ],
+ "value": "When a HTTP/2 stream was reset (RST frame) by a client, there was a time window were the request's memory resources were not reclaimed immediately. Instead, de-allocation was deferred to connection close. A client could send new requests and resets, keeping the connection busy and open and causing the memory footprint to keep on growing. On connection close, all resources were reclaimed, but the process might run out of memory before that.\n\nThis was found by the rep [...]
+ }
+ ],
+ "metrics": [
+ {
+ "other": {
+ "content": {
+ "text": "moderate"
+ },
+ "type": "Textual description of severity"
+ }
+ }
+ ],
+ "problemTypes": [
+ {
+ "descriptions": [
+ {
+ "cweId": "CWE-400",
+ "description": "CWE-400 Uncontrolled Resource Consumption",
+ "lang": "en",
+ "type": "CWE"
+ }
+ ]
+ }
+ ],
+ "providerMetadata": {
+ "orgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09"
+ },
+ "source": {
+ "discovery": "EXTERNAL"
+ },
+ "timeline": [
+ {
+ "lang": "en",
+ "time": "2023-10-12T11:47:00.000Z",
+ "value": "reported"
+ },
+ {
+ "lang": "eng",
+ "time": "2023-10-19",
+ "value": "2.4.58 released"
+ }
+ ],
+ "title": "Apache HTTP Server: HTTP/2 stream memory not reclaimed right away on RST",
+ "x_generator": {
+ "engine": "Vulnogram 0.1.0-dev"
+ }
+ }
+ },
+ "cveMetadata": {
+ "assignerOrgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
+ "cveId": "CVE-2023-45802",
+ "serial": 1,
+ "state": "PUBLISHED"
+ },
+ "dataType": "CVE_RECORD",
+ "dataVersion": "5.0"
+}
diff --git a/output/security/vulnerabilities-httpd.json b/output/security/vulnerabilities-httpd.json
index 63cf1c7..7f9d5ce 100644
--- a/output/security/vulnerabilities-httpd.json
+++ b/output/security/vulnerabilities-httpd.json
@@ -3797,6 +3797,114 @@
}
}
},
+ {
+ "containers": {
+ "cna": {
+ "affected": [
+ {
+ "defaultStatus": "unaffected",
+ "product": "Apache HTTP Server",
+ "vendor": "Apache Software Foundation",
+ "versions": [
+ {
+ "lessThanOrEqual": "2.4.57",
+ "status": "affected",
+ "version": "2.4.55",
+ "versionType": "semver"
+ }
+ ]
+ }
+ ],
+ "credits": [
+ {
+ "lang": "en",
+ "type": "finder",
+ "value": "Prof. Sven Dietrich (City University of New York)"
+ },
+ {
+ "lang": "en",
+ "type": "finder",
+ "value": "Isa Jafarov (City University of New York)"
+ },
+ {
+ "lang": "en",
+ "type": "finder",
+ "value": "Prof. Heejo Lee (Korea University)"
+ },
+ {
+ "lang": "en",
+ "type": "finder",
+ "value": "Choongin Lee (Korea University)"
+ }
+ ],
+ "descriptions": [
+ {
+ "lang": "en",
+ "supportingMedia": [
+ {
+ "base64": false,
+ "type": "text/html",
+ "value": "An attacker, opening a HTTP/2 connection with an initial window size of 0, was able to block handling of that connection indefinitely in Apache HTTP Server. This could be used to exhaust worker resources in the server, similar to the well known \"slow loris\" attack pattern.<br><p>This has been fixed in version 2.4.58, so that such connection are terminated properly after the configured connection timeout.</p><p>This issue affects Apache HTTP Ser [...]
+ }
+ ],
+ "value": "An attacker, opening a HTTP/2 connection with an initial window size of 0, was able to block handling of that connection indefinitely in Apache HTTP Server. This could be used to exhaust worker resources in the server, similar to the well known \"slow loris\" attack pattern.\nThis has been fixed in version 2.4.58, so that such connection are terminated properly after the configured connection timeout.\n\nThis issue affects Apache HTTP Server: from 2.4.55 [...]
+ }
+ ],
+ "metrics": [
+ {
+ "other": {
+ "content": {
+ "text": "low"
+ },
+ "type": "Textual description of severity"
+ }
+ }
+ ],
+ "problemTypes": [
+ {
+ "descriptions": [
+ {
+ "cweId": "CWE-400",
+ "description": "CWE-400 Uncontrolled Resource Consumption",
+ "lang": "en",
+ "type": "CWE"
+ }
+ ]
+ }
+ ],
+ "providerMetadata": {
+ "orgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09"
+ },
+ "source": {
+ "discovery": "EXTERNAL"
+ },
+ "timeline": [
+ {
+ "lang": "en",
+ "time": "2023-09-15T09:51:00.000Z",
+ "value": "reported"
+ },
+ {
+ "lang": "eng",
+ "time": "2023-10-19",
+ "value": "2.4.58 released"
+ }
+ ],
+ "title": "Apache HTTP Server: DoS in HTTP/2 with initial windows size 0",
+ "x_generator": {
+ "engine": "Vulnogram 0.1.0-dev"
+ }
+ }
+ },
+ "cveMetadata": {
+ "assignerOrgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
+ "cveId": "CVE-2023-43622",
+ "serial": 1,
+ "state": "PUBLISHED"
+ },
+ "dataType": "CVE_RECORD",
+ "dataVersion": "5.0"
+ },
{
"data_type": "CVE",
"data_format": "MITRE",
@@ -33034,6 +33142,104 @@
}
}
},
+ {
+ "containers": {
+ "cna": {
+ "affected": [
+ {
+ "defaultStatus": "unaffected",
+ "product": "Apache HTTP Server",
+ "vendor": "Apache Software Foundation",
+ "versions": [
+ {
+ "lessThanOrEqual": "2.4.57",
+ "status": "affected",
+ "version": "2.4.17",
+ "versionType": "semver"
+ }
+ ]
+ }
+ ],
+ "credits": [
+ {
+ "lang": "en",
+ "type": "finder",
+ "value": "Will Dormann of Vul Labs"
+ },
+ {
+ "lang": "en",
+ "type": "finder",
+ "value": "David Warren of Vul Labs"
+ }
+ ],
+ "descriptions": [
+ {
+ "lang": "en",
+ "supportingMedia": [
+ {
+ "base64": false,
+ "type": "text/html",
+ "value": "When a HTTP/2 stream was reset (RST frame) by a client, there was a time window were the request's memory resources were not reclaimed immediately. Instead, de-allocation was deferred to connection close. A client could send new requests and resets, keeping the connection busy and open and causing the memory footprint to keep on growing. On connection close, all resources were reclaimed, but the process might run out of memory before that.<br><br [...]
+ }
+ ],
+ "value": "When a HTTP/2 stream was reset (RST frame) by a client, there was a time window were the request's memory resources were not reclaimed immediately. Instead, de-allocation was deferred to connection close. A client could send new requests and resets, keeping the connection busy and open and causing the memory footprint to keep on growing. On connection close, all resources were reclaimed, but the process might run out of memory before that.\n\nThis was fo [...]
+ }
+ ],
+ "metrics": [
+ {
+ "other": {
+ "content": {
+ "text": "moderate"
+ },
+ "type": "Textual description of severity"
+ }
+ }
+ ],
+ "problemTypes": [
+ {
+ "descriptions": [
+ {
+ "cweId": "CWE-400",
+ "description": "CWE-400 Uncontrolled Resource Consumption",
+ "lang": "en",
+ "type": "CWE"
+ }
+ ]
+ }
+ ],
+ "providerMetadata": {
+ "orgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09"
+ },
+ "source": {
+ "discovery": "EXTERNAL"
+ },
+ "timeline": [
+ {
+ "lang": "en",
+ "time": "2023-10-12T11:47:00.000Z",
+ "value": "reported"
+ },
+ {
+ "lang": "eng",
+ "time": "2023-10-19",
+ "value": "2.4.58 released"
+ }
+ ],
+ "title": "Apache HTTP Server: HTTP/2 stream memory not reclaimed right away on RST",
+ "x_generator": {
+ "engine": "Vulnogram 0.1.0-dev"
+ }
+ }
+ },
+ "cveMetadata": {
+ "assignerOrgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
+ "cveId": "CVE-2023-45802",
+ "serial": 1,
+ "state": "PUBLISHED"
+ },
+ "dataType": "CVE_RECORD",
+ "dataVersion": "5.0"
+ },
{
"data_type": "CVE",
"data_format": "MITRE",
@@ -36640,6 +36846,104 @@
}
}
},
+ {
+ "cveMetadata": {
+ "cveId": "CVE-2023-31122",
+ "assignerOrgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
+ "serial": 1,
+ "state": "PUBLISHED"
+ },
+ "CNA_private": {
+ "emailed": null,
+ "projecturl": null,
+ "owner": "httpd",
+ "userslist": "users@httpd.apache.org",
+ "state": "DRAFT",
+ "todo": [],
+ "type": "unsure"
+ },
+ "containers": {
+ "cna": {
+ "providerMetadata": {
+ "orgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09"
+ },
+ "title": "mod_macro buffer over-read",
+ "problemTypes": [
+ {
+ "descriptions": [
+ {
+ "description": "CWE-125 Out-of-bounds Read",
+ "lang": "en",
+ "cweId": "CWE-125",
+ "type": "CWE"
+ }
+ ]
+ }
+ ],
+ "source": {
+ "discovery": "UNKNOWN"
+ },
+ "affected": [
+ {
+ "vendor": "Apache Software Foundation",
+ "product": "Apache HTTP Server",
+ "versions": [
+ {
+ "status": "affected",
+ "version": "0",
+ "lessThanOrEqual": "2.4.57",
+ "versionType": "semver"
+ }
+ ],
+ "defaultStatus": "unaffected"
+ }
+ ],
+ "descriptions": [
+ {
+ "value": "Out-of-bounds Read vulnerability in mod_macro of Apache HTTP Server.This issue affects Apache HTTP Server: through 2.4.57.\n\n",
+ "lang": "en",
+ "supportingMedia": [
+ {
+ "type": "text/html",
+ "base64": false,
+ "value": "Out-of-bounds Read vulnerability in mod_macro of Apache HTTP Server.<p>This issue affects Apache HTTP Server: through 2.4.57.</p>"
+ }
+ ]
+ }
+ ],
+ "references": [],
+ "metrics": [
+ {
+ "other": {
+ "type": "Textual description of severity",
+ "content": {
+ "text": "low"
+ }
+ }
+ }
+ ],
+ "credits": [
+ {
+ "lang": "en",
+ "value": "David Shoon (github/davidshoon)",
+ "type": "finder"
+ }
+ ],
+ "x_generator": {
+ "engine": "Vulnogram 0.1.0-dev"
+ },
+ "timeline": [
+ {
+ "lang": "eng",
+ "time": "2023-10-19",
+ "value": "2.4.58 released"
+ }
+ ]
+ }
+ },
+ "dataType": "CVE_RECORD",
+ "dataVersion": "5.0"
+ },
{
"data_type": "CVE",
"data_format": "MITRE",
diff --git a/output/security/vulnerabilities_24.html b/output/security/vulnerabilities_24.html
index 864de71..03a718f 100644
--- a/output/security/vulnerabilities_24.html
+++ b/output/security/vulnerabilities_24.html
@@ -91,6 +91,41 @@ h1:hover > .headerlink, h2:hover > .headerlink, h3:hover > .headerlink, h4:hover
<p>Please note that if a vulnerability is shown below as being fixed in a "-dev" release then this means that a fix has been applied to the development source tree and will be part of an upcoming full release.</p>
<p>Please send comments or corrections for these vulnerabilities to the <a href="/security_report.html">Security Team</a>.</p> <br/>
<p><em>The initial GA release, Apache httpd 2.4.1, includes fixes for all vulnerabilities which have been resolved in Apache httpd 2.2.22 and all older releases. Consult the <a href="vulnerabilities_22.html">Apache httpd 2.2 vulnerabilities list</a> for more information.</em></p><br/>
+<h1 id="2.4.58">Fixed in Apache HTTP Server 2.4.58</h1><dl>
+<dt><h3 id="CVE-2023-31122">low: <name name="CVE-2023-31122">mod_macro buffer over-read</name>
+(<a href="https://www.cve.org/CVERecord?id=CVE-2023-31122">CVE-2023-31122</a>)</h3></dt>
+<dd><p>Out-of-bounds Read vulnerability in mod_macro of Apache HTTP Server.This issue affects Apache HTTP Server: through 2.4.57.</p><p></p><p></p>
+<p>Acknowledgements: finder: David Shoon (github/davidshoon)</p>
+<table class="table"><tr><td class="cve-header">Update 2.4.58 released</td><td class="cve-value">2023-10-19</td></tr>
+<tr><td class="cve-header">Affects</td><td class="cve-value"><=2.4.57</td></tr>
+</table></dd>
+<dt><h3 id="CVE-2023-43622">low: <name name="CVE-2023-43622">Apache HTTP Server: DoS in HTTP/2 with initial windows size 0</name>
+(<a href="https://www.cve.org/CVERecord?id=CVE-2023-43622">CVE-2023-43622</a>)</h3></dt>
+<dd><p>An attacker, opening a HTTP/2 connection with an initial window size of 0, was able to block handling of that connection indefinitely in Apache HTTP Server. This could be used to exhaust worker resources in the server, similar to the well known "slow loris" attack pattern.</p><p>This has been fixed in version 2.4.58, so that such connection are terminated properly after the configured connection timeout.</p><p></p><p>This issue affects Apache HTTP Server: from 2.4.55 through 2.4.5 [...]
+<p>Acknowledgements:</p>
+<ul>
+<li>finder: Prof. Sven Dietrich (City University of New York)</li>
+<li>finder: Isa Jafarov (City University of New York)</li>
+<li>finder: Prof. Heejo Lee (Korea University)</li>
+<li>finder: Choongin Lee (Korea University)</li>
+</ul>
+<table class="table"><tr><td class="cve-header">Reported to security team</td><td class="cve-value">2023-09-15</td></tr>
+<tr><td class="cve-header">Update 2.4.58 released</td><td class="cve-value">2023-10-19</td></tr>
+<tr><td class="cve-header">Affects</td><td class="cve-value"><=2.4.57</td></tr>
+</table></dd>
+<dt><h3 id="CVE-2023-45802">moderate: <name name="CVE-2023-45802">Apache HTTP Server: HTTP/2 stream memory not reclaimed right away on RST</name>
+(<a href="https://www.cve.org/CVERecord?id=CVE-2023-45802">CVE-2023-45802</a>)</h3></dt>
+<dd><p>When a HTTP/2 stream was reset (RST frame) by a client, there was a time window were the request's memory resources were not reclaimed immediately. Instead, de-allocation was deferred to connection close. A client could send new requests and resets, keeping the connection busy and open and causing the memory footprint to keep on growing. On connection close, all resources were reclaimed, but the process might run out of memory before that.</p><p></p><p>This was found by the report [...]
+<p>Acknowledgements:</p>
+<ul>
+<li>finder: Will Dormann of Vul Labs</li>
+<li>finder: David Warren of Vul Labs</li>
+</ul>
+<table class="table"><tr><td class="cve-header">Reported to security team</td><td class="cve-value">2023-10-12</td></tr>
+<tr><td class="cve-header">Update 2.4.58 released</td><td class="cve-value">2023-10-19</td></tr>
+<tr><td class="cve-header">Affects</td><td class="cve-value"><=2.4.57</td></tr>
+</table></dd>
+</dl>
<h1 id="2.4.56">Fixed in Apache HTTP Server 2.4.56</h1><dl>
<dt><h3 id="CVE-2023-25690">important: <name name="CVE-2023-25690">HTTP request splitting with mod_rewrite and mod_proxy</name>
(<a href="https://www.cve.org/CVERecord?id=CVE-2023-25690">CVE-2023-25690</a>)</h3></dt>