The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The Solaris pollset feature in the Event Port backend in poll/unix/port.c in the Apache Portable Runtime (APR) library before 1.3.9, as used in the Apache HTTP Server before 2.2.14 and other products, does not properly handle errors, which allows remote attackers to cause a denial of service (daemon hang) via unspecified HTTP requests, related to the prefork and event MPMs.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apache Httpd | — | Upgrade to the latest version of Apache HTTPD | Apr 12, 2012 | Oct 13, 2009 |
| Suse | — | Upgrade apache2-develUpgrade apache2-preforkUpgrade apache2Upgrade apache2-workerUpgrade apache2-example-pagesUpgrade apache2-eventUpgrade apache2-manualUpgrade apache2-docUpgrade apache2-utils | Apr 26, 2018 | Jul 9, 2013 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub