REDHAT-BUG-1341583: Buffer Overflow
Configuration of modcluster via JVMRoute longer than 80 characters will cause segfault.
A segmentation fault can occur in Apache HTTPD 2.2.
The crash is due to a strcpy buffer overflow in modcluster's modmanager.
https://github.com/modcluster/modcluster/blob/1.2.9.Final/native/modmanager/node.c#L227 [Open URL]
If clients send a request with a JVMRoute longer than 80 characters (the size of the strcpy destination), the strcpy segfaults.
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-1341583?
REDHAT-BUG-1341583 is a critical severity vulnerability due to a segmentation fault in Apache HTTPD 2.2.
How do I fix REDHAT-BUG-1341583?
To fix REDHAT-BUG-1341583, configure the mod_cluster JVMRoute to be less than 80 characters.
What software is affected by REDHAT-BUG-1341583?
Apache HTTPD 2.2 is the affected software for vulnerability REDHAT-BUG-1341583.
What causes the issue in REDHAT-BUG-1341583?
The issue in REDHAT-BUG-1341583 is caused by a strcpy buffer overflow in mod_cluster's mod_manager.
What is the impact of exploiting REDHAT-BUG-1341583?
Exploiting REDHAT-BUG-1341583 can lead to segmentation faults that crash the Apache HTTPD service.