What is RHSA-2014:1972?

RHSA-2014:1972 is a security advisory published by Red Hat Product Security with Low severity. Red Hat Security Advisory: httpd24-httpd security and bug fix update

Which CVE IDs does RHSA-2014:1972 cover?

RHSA-2014:1972 covers the following CVE IDs: CVE-2013-5704, CVE-2014-3581. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

Which products are affected by RHSA-2014:1972?

RHSA-2014:1972 affects 77 products, including: Red Hat Software Collections 1 for Red Hat Enterprise Linux Server (v. 6); Red Hat Software Collections 1 for Red Hat Enterprise Linux Server (v. 7); Red Hat Software Collections 1 for Red Hat Enterprise Linux Server EUS (v. 6.4); Red Hat Software Collections 1 for Red Hat Enterprise Linux Server EUS (v. 6.5); Red Hat Software Collections 1 for Red Hat Enterprise Linux Server EUS (v. 6.6); and others — see the full list on the advisory page.

RHSA-2014:1972Low

Red Hat Security Advisory: httpd24-httpd security and bug fix update

Vendor

Red Hat Product Security

Published

December 9, 2014

Last Modified

November 7, 2026

🔗 CVE IDs covered (2)

CVE-2013-5704 →CVE-2014-3581 →

📋 Description

CVE-2013-5704 — httpd: bypass of mod_headers rules via chunked requests CVE-2014-3581 — httpd: NULL pointer dereference in mod_cache if Content-Type has empty value

🎯 Affected products77

Red Hat Software Collections 1 for Red Hat Enterprise Linux Server (v. 6)
Red Hat Software Collections 1 for Red Hat Enterprise Linux Server (v. 7)
Red Hat Software Collections 1 for Red Hat Enterprise Linux Server EUS (v. 6.4)
Red Hat Software Collections 1 for Red Hat Enterprise Linux Server EUS (v. 6.5)
Red Hat Software Collections 1 for Red Hat Enterprise Linux Server EUS (v. 6.6)
Red Hat Software Collections 1 for Red Hat Enterprise Linux Workstation (v. 6)
Red Hat Software Collections 1 for Red Hat Enterprise Linux Workstation (v. 7)
httpd24-httpd-0:2.4.6-22.el6.src as a component of Red Hat Software Collections 1 for Red Hat Enterprise Linux Server (v. 6)
httpd24-httpd-0:2.4.6-22.el6.src as a component of Red Hat Software Collections 1 for Red Hat Enterprise Linux Server EUS (v. 6.4)
httpd24-httpd-0:2.4.6-22.el6.src as a component of Red Hat Software Collections 1 for Red Hat Enterprise Linux Server EUS (v. 6.5)
httpd24-httpd-0:2.4.6-22.el6.src as a component of Red Hat Software Collections 1 for Red Hat Enterprise Linux Server EUS (v. 6.6)
httpd24-httpd-0:2.4.6-22.el6.src as a component of Red Hat Software Collections 1 for Red Hat Enterprise Linux Workstation (v. 6)
httpd24-httpd-0:2.4.6-22.el6.x86_64 as a component of Red Hat Software Collections 1 for Red Hat Enterprise Linux Server (v. 6)
httpd24-httpd-0:2.4.6-22.el6.x86_64 as a component of Red Hat Software Collections 1 for Red Hat Enterprise Linux Server EUS (v. 6.4)
httpd24-httpd-0:2.4.6-22.el6.x86_64 as a component of Red Hat Software Collections 1 for Red Hat Enterprise Linux Server EUS (v. 6.5)
httpd24-httpd-0:2.4.6-22.el6.x86_64 as a component of Red Hat Software Collections 1 for Red Hat Enterprise Linux Server EUS (v. 6.6)
httpd24-httpd-0:2.4.6-22.el6.x86_64 as a component of Red Hat Software Collections 1 for Red Hat Enterprise Linux Workstation (v. 6)
httpd24-httpd-0:2.4.6-25.el7.src as a component of Red Hat Software Collections 1 for Red Hat Enterprise Linux Server (v. 7)
httpd24-httpd-0:2.4.6-25.el7.src as a component of Red Hat Software Collections 1 for Red Hat Enterprise Linux Workstation (v. 7)
httpd24-httpd-0:2.4.6-25.el7.x86_64 as a component of Red Hat Software Collections 1 for Red Hat Enterprise Linux Server (v. 7)
httpd24-httpd-0:2.4.6-25.el7.x86_64 as a component of Red Hat Software Collections 1 for Red Hat Enterprise Linux Workstation (v. 7)
httpd24-httpd-debuginfo-0:2.4.6-22.el6.x86_64 as a component of Red Hat Software Collections 1 for Red Hat Enterprise Linux Server (v. 6)
httpd24-httpd-debuginfo-0:2.4.6-22.el6.x86_64 as a component of Red Hat Software Collections 1 for Red Hat Enterprise Linux Server EUS (v. 6.4)
httpd24-httpd-debuginfo-0:2.4.6-22.el6.x86_64 as a component of Red Hat Software Collections 1 for Red Hat Enterprise Linux Server EUS (v. 6.5)
httpd24-httpd-debuginfo-0:2.4.6-22.el6.x86_64 as a component of Red Hat Software Collections 1 for Red Hat Enterprise Linux Server EUS (v. 6.6)
httpd24-httpd-debuginfo-0:2.4.6-22.el6.x86_64 as a component of Red Hat Software Collections 1 for Red Hat Enterprise Linux Workstation (v. 6)
httpd24-httpd-debuginfo-0:2.4.6-25.el7.x86_64 as a component of Red Hat Software Collections 1 for Red Hat Enterprise Linux Server (v. 7)
httpd24-httpd-debuginfo-0:2.4.6-25.el7.x86_64 as a component of Red Hat Software Collections 1 for Red Hat Enterprise Linux Workstation (v. 7)
httpd24-httpd-devel-0:2.4.6-22.el6.x86_64 as a component of Red Hat Software Collections 1 for Red Hat Enterprise Linux Server (v. 6)
httpd24-httpd-devel-0:2.4.6-22.el6.x86_64 as a component of Red Hat Software Collections 1 for Red Hat Enterprise Linux Server EUS (v. 6.4)
+47 more not shown

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258

🔗 CVE IDs covered (2)

📋 Description

🎯 Affected products77

✅ Remediation

🔗 References (6)