Apache HTTP Server 多个CVE漏洞公告 (CVE-2020-13938/2021-31618等)

关键信息总结： 1. 漏洞列表与影响： CVE-2020-13938: Improper Handling of Insufficient Privileges. Fixes an issue where unprivileged local users could stop httpd on Windows. CVE-2021-31618: NULL pointer dereference on specially crafted HTTP/2 request. Affects certain versions of Apache HTTP Server 2.4.x. CVE-2019-17567: mod_proxy_wstunnel tunneling of non-Upgrade authenticated or authorization possibly configured. CVE-2020-13930: mod_proxy_http NULL pointer dereference. Affects certain versions of Apache HTTP Server. CVE-2020-13934: APR pool mutex destruction crash. Affects Apache HTTP Server 2.4.39 and prior. CVE-2016-10005: ap_get_basic_auth_pw() Authentication Bypass. Affects certain versions of Apache HTTP Server. 2. 影响范围： Apache HTTP Server 2.4.x versions have multiple vulnerabilities affecting availability, integrity, and confidentiality. 3. 修复信息： CVS updates show fixes committed to the branch for various versions of Apache HTTP Server. Acknowledgements include contributions from various researchers and developers. 4. 建议措施： Update Apache HTTP Server to the latest versions to mitigate identified vulnerabilities. Monitor and log for potential attacks and unauthorized access attempts. Apply security patches as soon as they are available to prevent exploitation of known vulnerabilities. --- This summary highlights the most critical vulnerabilities, their impact, affected versions, and recommended actions based on the provided screenshot content.

目标达成感谢每一位支持者 — 我们达成了 100% 目标！

Apache HTTP Server 多个CVE漏洞公告 (CVE-2020-13938/2021-31618等)

同源更多文章

目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

Apache HTTP Server 多个CVE漏洞公告 (CVE-2020-13938/2021-31618等)

同源更多文章

目标达成感谢每一位支持者 — 我们达成了 100% 目标！