Security update for apache2
This update for apache2 fixes the following issues: - CVE-2021-40438: Fixed a SRF via a crafted request uri-path. (bsc#1190703) - CVE-2021-36160: Fixed an out-of-bounds read via a crafted request uri-path. (bsc#1190702) - CVE-2021-39275: Fixed an out-of-bounds write in ap_escape_quotes() via malicious input. (bsc#1190666) - CVE-2021-34798: Fixed a NULL pointer dereference via malformed requests. (bsc#1190669)
02 / AFFECTED SOFTWARE
Affected packages
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
This update for apache2 fixes the following issues: - CVE-2021-40438: Fixed a SRF via a crafted request uri-path. (bsc#1190703) - CVE-2021-36160: Fixed an out-of-bounds read via a crafted request uri-path. (bsc#1190702) - CVE-2021-39275: Fixed an out-of-bounds write in ap_escape_quotes() via malicious input. (bsc#1190666) - CVE-2021-34798: Fixed a NULL pointer dereference via malformed requests. (bsc#1190669)
05 / REFERENCES
Further evidence
- https://bugzilla.suse.com/1190666
- https://bugzilla.suse.com/1190669
- https://bugzilla.suse.com/1190702
- https://bugzilla.suse.com/1190703
- https://lists.opensuse.org/archives/list/[email protected]/thread/JKKOECDBM5767TKS4AX32R26YLJDYTJT/
- https://www.suse.com/security/cve/CVE-2021-34798
- https://www.suse.com/security/cve/CVE-2021-36160
- https://www.suse.com/security/cve/CVE-2021-39275
- https://www.suse.com/security/cve/CVE-2021-40438