RHSA-2014:0784Medium
Red Hat Security Advisory: Red Hat JBoss Web Server 2.0.1 httpd security and bug fix update
🔗 CVE IDs covered (2)
📋 Description
CVE-2013-6438 — httpd: mod_dav denial of service via crafted DAV WRITE request CVE-2014-0098 — httpd: mod_log_config does not properly handle logging certain cookies resulting in DoS
🎯 Affected products1
- Red Hat JBoss Web Server 2.0
✅ Remediation
The References section of this erratum contains a download link (you must log in to download the update). Before applying the update, back up your existing Red Hat JBoss Web Server installation (including all applications and configuration files).
🔗 References (7)
- selfhttps://access.redhat.com/errata/RHSA-2014:0784
- externalhttps://access.redhat.com/security/updates/classification/#moderate
- externalhttps://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=webserver&downloadType=securityPatches&version=2.0.1
- externalhttps://issues.apache.org/bugzilla/show_bug.cgi?id=53104
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1077867
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1077871
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_0784.json