vulnwire
7.5high

CVE-2018-1303in critical feed

A specially crafted HTTP request header could have crashed the Apache HTTP Server prior to version 2.4.30 due to an out of bound read while…

Published 8 y ago · modified 4 mo ago · JSON

CVSS
7.5
v3.0 · NVD
CISA KEV
No
not known exploited
EPSS
69.8%
percentile 99%
Public exploits
0
none known

A specially crafted HTTP request header could have crashed the Apache HTTP Server prior to version 2.4.30 due to an out of bound read while preparing data to be cached in shared memory. It could be used as a Denial of Service attack against users of mod_cache_socache. The vulnerability is considered as low risk since mod_cache_socache is not widely used, mod_cache_disk is not concerned by this vulnerability.

Exploit prediction (EPSS)

69.80% probability of exploitation in the next 30 days, higher than 99% of all scored CVEs.

CVSS scores

Assigned byVersionScoreVector
NVD3.07.5CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
NVD2.05.0AV:N/AC:L/Au:N/C:N/I:N/A:P

Affected products

  • Apache Software Foundation Apache HTTP Server

Classification

Weakness
Technology feeds
Apache HTTP Server (RSS, critical only)

References

  • usn.ubuntu.com /3627-1/ · vendor-advisory, x_refsource_UBUNTU, x_transferred
  • securityfocus.com /bid/103522 · vdb-entry, x_refsource_BID, x_transferred
  • debian.org /security/2018/dsa-4164 · vendor-advisory, x_refsource_DEBIAN, x_transferred
  • security.netapp.com /advisory/ntap-20180601-0004/ · x_refsource_CONFIRM, x_transferred
  • access.redhat.com /errata/RHSA-2018:3558 · vendor-advisory, x_refsource_REDHAT, x_transferred
  • support.hpe.com /hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03909en_us · x_refsource_CONFIRM, x_transferred
  • access.redhat.com /errata/RHSA-2019:0367 · vendor-advisory, x_refsource_REDHAT, x_transferred
  • usn.ubuntu.com /3627-2/ · vendor-advisory, x_refsource_UBUNTU, x_transferred
  • securitytracker.com /id/1040572 · vdb-entry, x_refsource_SECTRACK, x_transferred
  • httpd.apache.org /security/vulnerabilities_24.html · x_refsource_CONFIRM, x_transferred
  • openwall.com /lists/oss-security/2018/03/24/3 · mailing-list, x_refsource_MLIST, x_transferred
  • access.redhat.com /errata/RHSA-2019:0366 · vendor-advisory, x_refsource_REDHAT, x_transferred
  • lists.apache.org /thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apach · mailing-list, x_refsource_MLIST, x_transferred
  • lists.apache.org /thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apach · mailing-list, x_refsource_MLIST, x_transferred
  • tenable.com /security/tns-2019-09 · x_refsource_CONFIRM, x_transferred
  • lists.apache.org /thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apac · mailing-list, x_refsource_MLIST, x_transferred
  • lists.apache.org /thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apac · mailing-list, x_refsource_MLIST, x_transferred
  • lists.apache.org /thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apac · mailing-list, x_refsource_MLIST, x_transferred
  • lists.apache.org /thread.html/r06f0d87ebb6d59ed8379633f36f72f5b1f79cadfda72ede0830b42cf%40%3Ccvs.httpd.apac · mailing-list, x_refsource_MLIST, x_transferred
  • lists.apache.org /thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apac · mailing-list, x_refsource_MLIST, x_transferred
  • lists.apache.org /thread.html/r15f9aa4427581a1aecb4063f1b4b983511ae1c9935e2a0a6876dad3c%40%3Ccvs.httpd.apac · mailing-list, x_refsource_MLIST, x_transferred
  • lists.apache.org /thread.html/rfcf929bd33a6833e3f0c35eebdad70d5060665f9c4e17ea467c66770%40%3Ccvs.httpd.apac · mailing-list, x_refsource_MLIST, x_transferred
  • lists.apache.org /thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apac · mailing-list, x_refsource_MLIST, x_transferred
  • lists.apache.org /thread.html/re473305a65b4db888e3556e4dae10c2a04ee89dcff2e26ecdbd860a9%40%3Ccvs.httpd.apac · mailing-list, x_refsource_MLIST, x_transferred
  • lists.apache.org /thread.html/r76142b8c5119df2178be7c2dba88fde552eedeec37ea993dfce68d1d%40%3Ccvs.httpd.apac · mailing-list, x_refsource_MLIST, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.