PT-2018-3116 · Apache+5 · Apache Httpd+6

Publicado 2018-03-21 · Atualizado 2021-06-06 · CVE-2017-15715

Positive Technologies (AI Summary)

CVSS v3.1

8.1

Alta

Vetor base

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Apache httpd versions 2.4.0 through 2.4.29

Description The issue arises from the expression specified in FilesMatch being able to match '$' to a newline character in a malicious filename, rather than matching only the end of the filename. This could be exploited in environments where uploads of some files are externally blocked, but only by matching the trailing portion of the filename. The vulnerability exists due to insufficient input validation, which may allow a remote attacker to impact the confidentiality, integrity, and availability of protected information.

Recommendations For Apache httpd versions 2.4.0 through 2.4.29, consider updating to a version where this issue is fixed, as the current version may allow malicious filenames to bypass external blocking by matching the trailing portion of the filename. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

ALT-PU-2018-1519

BDU:2019-04106

CESA-2020_3958

CVE-2017-15715

DSA-4164-1

MGASA-2018-0460

RHSA-2018:3558

RHSA-2019:0367

RHSA-2020:3958

RHSA-2020_3958

SUSE-SU-2018:0879-1

SUSE-SU-2018:0901-1

SUSE-SU-2018:1161-1

SUSE-SU-2018:1161-2

USN-3627-1

USN-3627-2

Produtos afetados

Alt Linux

Apache Http Server

Apache Httpd

Centos

Red Hat

Suse

Ubuntu

Referências · 123

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1312 · Nota de Segurança
• https://ubuntu.com/security/CVE-2018-1303 · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1303 · Nota de Segurança
• https://lists.apache.org/thread.html/rd336919f655b7ff309385e34a143e41c503e133da80414485b3abcc9%40%3Ccvs.httpd.apache.org%3E · Nota
• https://access.redhat.com/security/cve/CVE-2019-10098 · Nota
• https://suse.com/security/cve/CVE-2017-15710 · Nota
• https://bugzilla.suse.com/1086820 · Nota
• https://lists.opensuse.org/opensuse-updates/2018-05/msg00023.html · Nota
• https://ubuntu.com/security/CVE-2018-1283 · Aviso do Fabricante
• https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E · Nota
• https://abf.rosa.ru/advisories/ROSA-SA-2025-2860 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2017-15715 · Nota de Segurança
• https://bugs.mageia.org/show_bug.cgi?id=22833 · Nota
• https://osv.dev/vulnerability/ALPINE-CVE-2017-15715 · Aviso do Fabricante
• https://osv.dev/vulnerability/SUSE-SU-2018:0879-1 · Aviso do Fabricante