The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
In Apache httpd before 2.2.34 and 2.4.x before 2.4.27, the value placeholder in [Proxy-]Authorization headers of type 'Digest' was not initialized or reset before or between successive key=value assignments by mod_auth_digest. Providing an initial key with no '=' assignment could reflect the stale value of uninitialized pool memory used by the prior request, leading to leakage of potentially confidential information, and a segfault in other cases resulting in denial of service.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux | — | Upgrade httpd | Sep 15, 2017 | Jul 13, 2017 |
| Apache Httpd | — | Upgrade to the latest version of Apache HTTPD | Jul 14, 2017 | Jul 13, 2017 |
| Apple Osx Apache | — | Apply OS X security update 2017-001 SierraApply OS X security update 2017-004 El Capitan | Nov 1, 2017 | Jul 13, 2017 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jul 13, 2017 |
| Centos_linux | — | Upgrade httpd-toolsUpgrade httpd-manualUpgrade mod_sessionUpgrade httpdUpgrade httpd-debuginfoUpgrade httpd-develUpgrade mod_sslUpgrade mod_ldapUpgrade mod_proxy_html | Aug 16, 2017 | Jul 13, 2017 |
| Debian | — | Upgrade apache2 | Jul 19, 2017 | Jul 13, 2017 |
| Freebsd | — | Upgrade apache24 | Jul 14, 2017 | Jul 13, 2017 |
| Gentoo Linux | — | Upgrade www-servers/apache. | Oct 30, 2017 | Jul 13, 2017 |
| Hpux | — | Update hpuxwsAPACHE to the latest version | Mar 28, 2022 | Jul 13, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade httpdUpgrade httpd-toolsUpgrade httpd-develUpgrade httpd-manual | Nov 30, 2017 | Jul 13, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade httpd-manualUpgrade httpdUpgrade httpd-toolsUpgrade httpd-devel | Nov 30, 2017 | Jul 13, 2017 |
| Ibm Http_server | — | Apply IBM HTTP Server version 8.5.5.13 or laterApply IBM HTTP Server version 8.0.0.14 or laterApply IBM HTTP Server version 9.0.0.5 or later | Jun 22, 2018 | Jul 13, 2017 |
| Oracle Solaris | — | Upgrade web/server/apache-24/module/apache-dbd to version 2.4.27-0.175.3.24.0.1.0 on Solaris 11.3Upgrade web/server/apache-24/module/apache-ssl-fips-140 to version 2.4.27-0.175.3.24.0.1.0 on Solaris 11.3Upgrade web/server/apache-24/module/apache-ssl to version 2.4.27-0.175.3.24.0.1.0 on Solaris 11.3Upgrade web/server/apache-24/module/apache-ldap to version 2.4.27-0.175.3.24.0.1.0 on Solaris 11.3Upgrade web/server/apache-24/module/apache-lua to version 2.4.27-0.175.3.24.0.1.0 on Solaris 11.3Upgrade web/server/apache-24 to version 2.4.27-0.175.3.24.0.1.0 on Solaris 11.3 | Sep 19, 2017 | Jul 13, 2017 |
| Oracle_linux | — | Upgrade httpdUpgrade mod_ldapUpgrade mod_sslUpgrade mod_sessionUpgrade httpd-manualUpgrade mod_proxy_htmlUpgrade httpd-toolsUpgrade httpd-devel | Aug 16, 2017 | Jul 11, 2017 |
| Red Hat Jboss Eap | — | Upgrade Red Hat JBoss EAP to the latest version | Sep 19, 2024 | Jul 11, 2017 |
| Red_hat Jboss_eap | — | — | Nov 14, 2019 | Jul 13, 2017 |
| Redhat_linux | — | Upgrade httpd-debuginfoNo solution existsUpgrade httpdUpgrade mod_proxy_htmlUpgrade mod_sslUpgrade httpd-toolsUpgrade httpd-develUpgrade mod_sessionUpgrade mod_ldapUpgrade httpd-manual | Aug 15, 2017 | Jul 13, 2017 |
| Suse | — | Upgrade apache2-docUpgrade apache2-utilsUpgrade apache2-preforkUpgrade apache2-workerUpgrade apache2Upgrade apache2-example-pagesUpgrade apache2-devel | Jul 26, 2017 | Jul 13, 2017 |
| Ubuntu | — | Upgrade apache2.2-binUpgrade apache2-bin | Jul 27, 2017 | Jul 13, 2017 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 13, 2017 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub