PT-2016-3152 · Apache+5 · Apache Http Server+5

Publicado 2016-12-20 · Atualizado 2021-06-06 · CVE-2016-0736

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Apache HTTP Server versions 2.4.0 through 2.4.23 Apache HTTP Server versions prior to 2.4.25

Description The issue is related to errors in the encryption algorithm of the mod session crypto module in Apache HTTP Server. The module encrypts its data/cookie using configured ciphers with either CBC or ECB modes of operation, with AES256-CBC as the default. This results in a lack of selectable or built-in authenticated encryption, making it vulnerable to padding oracle attacks, particularly with CBC.

Recommendations For Apache HTTP Server versions 2.4.0 through 2.4.23, update to version 2.4.25 or later to resolve the issue. For Apache HTTP Server versions prior to 2.4.25, update to version 2.4.25 or later to resolve the issue. As a temporary workaround, consider disabling the mod session crypto module until a patch is available.

Exploit

Correção

Enumeração de Fraquezas

CWE-310

Identificadores relacionados

ALT-PU-2017-1655

BDU:2017-01806

CESA-2017_0906

CVE-2016-0736

DSA-3796-1

MGASA-2018-0007

RHSA-2017:0906

RHSA-2017:1161

RHSA-2017:1413

RHSA-2017:1414

RHSA-2017_0906

SUSE-SU-2017:0797-1

SUSE-SU-2017:0801-1

SUSE-SU-2017_0797-1

SUSE-SU-2017_0801-1

USN-3279-1

Produtos afetados

Alt Linux

Apache Http Server

Centos

Red Hat

Suse

Ubuntu

Referências · 96

• 🔥 https://exploit-db.com/exploits/40961 · Exploit
• https://access.redhat.com/errata/RHSA-2017:0906 · Aviso do Fabricante
• https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E · Nota
• https://bugzilla.suse.com/1016715 · Nota
• https://lists.suse.com/pipermail/sle-security-updates/2017-March/002737.html · Nota
• https://usn.ubuntu.com/usn/usn-3425-1 · Nota
• https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2016-0736 · Aviso do Fabricante
• https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E · Nota
• https://suse.com/security/cve/CVE-2016-2161.html · Nota
• https://osv.dev/vulnerability/CVE-2016-0736 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2016-0736.html · Nota
• http://securitytracker.com/id/1037508 · Nota
• https://errata.altlinux.org/ALT-PU-2017-1655 · Aviso do Fabricante
• https://cve.org/CVERecord?id=CVE-2016-0736 · Nota de Segurança
• http://securityfocus.com/bid/95078 · Nota