SB2020040112 - Red Hat Enterprise Linux 7 update for httpd

Description

This security bulletin contains information about 3 secuirty vulnerabilities.

1) Out-of-bounds write (CVE-ID: CVE-2017-15710)

The vulnerability allows a remote attacker to cause DoS condition on the target system.

The weakness exists in HTTPD mod_authnz_ldap due to improper validation of user-supplied input. A remote attacker can send a specially crafted Accept-Language header value, trigger an out-of-bounds memory write error and potentially cause the target service to crash.

2) Out-of-bounds read (CVE-ID: CVE-2018-1301)

The vulnerability allows a remote attacker to cause DoS condition on the target system.

The weakness exists due to improper validation of user-supplied input. A remote attacker can send a specially crafted HTTP request to trigger an out-of-bounds memory access error after a header size limit has been reached to cause the target service to crash.

3) Security restrictions bypass (CVE-ID: CVE-2018-17199)

The vulnerability allows a remote attacker to bypass security restrictions on the target system.

The weakness exists due to mod_session checks the session expiry time before decoding the session. A remote attacker сan cause session expiry time to be ignored for mod_session_cookie sessions since the expiry time is loaded when the session is decoded and reuse old session credentials or session IDs, which the attacker could use to access web pages previously accessed by a targeted user. 

Remediation

Install update from vendor's website.

References

• https://access.redhat.com/errata/RHSA-2020:1121