SUSE-SU-2018:2815-1: apache2&distro=SUSE Enterprise Storage 4 SUSE Linux Enterprise

Vulnerability summary

SUSE-SU-2018:2815-1 is a vulnerability in apache2&distro=SUSE Enterprise Storage 4 SUSE Linux Enterprise with no CVSS score yet.

Timeline

1. 24-09-2018
   PublishedVulnerability first disclosed.
2. 04-02-2026
   Last modifiedVulnerability information updated.

Description

Security update for apache2 This update for apache2 fixes the following issues: Security issues fixed: - CVE-2016-8743: Fixed liberal whitespace interpretation accepted from requests and sent in response lines and headers. Accepting these different behaviors represented a security concern when httpd participates in any chain of proxies or interacts with back-end application servers, either through mod_proxy or using conventional CGI mechanisms, and may result in request smuggling, response splitting and cache pollution. (bsc#1016715) - CVE-2016-4975: Fixed possible CRLF injection allowing HTTP response splitting attacks for sites which use mod_userdir. This issue was mitigated by changes which prohibit CR or LF injection into the 'Location' or other outbound header key or value. (bsc#1104826)

No weakness data has been published for this record.