REDHAT-BUG-2465299: Null Pointer Dereference
A NULL pointer dereference in the modauthnsocache in Apache HTTP Server 2.4.66 and earlier allows an unauthenticated remote user to crash a child process in a caching forward proxy configuration.
Users are recommended to upgrade to version 2.4.67, which fixes this issue.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Apache HTTP Serverto a version that resolves this vulnerability.Fixed in 2.4.67
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-2465299?
The severity of REDHAT-BUG-2465299 is medium, rated at 4.
How do I fix REDHAT-BUG-2465299?
To fix REDHAT-BUG-2465299, users should upgrade to Apache HTTP Server version 2.4.67.
What causes REDHAT-BUG-2465299?
REDHAT-BUG-2465299 is caused by a NULL pointer dereference in the mod_authn_socache of Apache HTTP Server 2.4.66 and earlier.
What are the risks associated with REDHAT-BUG-2465299?
The risks associated with REDHAT-BUG-2465299 include the potential for an unauthenticated remote user to crash a child process in a caching forward proxy configuration.
What versions of Apache HTTP Server are affected by REDHAT-BUG-2465299?
Apache HTTP Server versions 2.4.66 and earlier are affected by REDHAT-BUG-2465299.