Total vulnerabilities in the database
Race condition in the mod_status module in the Apache HTTP Server before 2.4.10 allows remote attackers to cause a denial of service (heap-based buffer overflow), or possibly obtain sensitive credential information or execute arbitrary code, via a crafted request that triggers improper scoreboard handling within the status_handler function in modules/generators/mod_status.c and the lua_ap_scoreboard_worker function in modules/lua/lua_request.c.
| Software | From | Fixed in |
|---|---|---|
| apache / http_server | 2.2.0 | 2.2.29 |
| apache / http_server | 2.4.1 | 2.4.10 |
| debian / debian_linux | 8.0 | 8.0.x |
| debian / debian_linux | 7.0 | 7.0.x |
| redhat / jboss_enterprise_application_platform | 6.0.0 | 6.0.0.x |
| redhat / jboss_enterprise_application_platform | 6.4.0 | 6.4.0.x |
| oracle / secure_global_desktop | 4.71 | 4.71.x |
| oracle / http_server | 12.1.3.0 | 12.1.3.0.x |
| oracle / secure_global_desktop | 4.63 | 4.63.x |
| oracle / enterprise_manager_ops_center | 12.1.4 | 12.1.4.x |
| oracle / http_server | 12.1.2.0 | 12.1.2.0.x |
| oracle / http_server | 11.1.1.7.0 | 11.1.1.7.0.x |
| oracle / http_server | 10.1.3.5.0 | 10.1.3.5.0.x |
| oracle / secure_global_desktop | 5.0 | 5.0.x |
| oracle / secure_global_desktop | 5.1 | 5.1.x |
| oracle / enterprise_manager_ops_center | 11.1.3 | 11.1.3.x |