USN-6902-1: Apache HTTP Server vulnerability
It was discovered that the Apache HTTP Server incorrectly handled certain handlers configured via AddType. A remote attacker could possibly use this issue to obtain source code.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/apache2to a version that resolves this vulnerability.Fixed in 2.4.58-1ubuntu8.4 - Upgrade
Upgrade
ubuntu/apache2to a version that resolves this vulnerability.Fixed in 2.4.52-1ubuntu4.12 - Upgrade
Upgrade
ubuntu/apache2to a version that resolves this vulnerability.Fixed in 2.4.41-4ubuntu3.21
Event History
Frequently Asked Questions
What is the severity of USN-6902-1?
The severity of USN-6902-1 is considered high due to the potential for remote attackers to exploit it to access source code.
How do I fix USN-6902-1?
To fix USN-6902-1, update the Apache2 package to version 2.4.58-1ubuntu8.4 or later for Ubuntu 24.04, 2.4.52-1ubuntu4.12 or later for Ubuntu 22.04, or 2.4.41-4ubuntu3.21 or later for Ubuntu 20.04.
What versions of Apache2 are affected by USN-6902-1?
The affected versions of Apache2 include those prior to 2.4.58-1ubuntu8.4 for Ubuntu 24.04, 2.4.52-1ubuntu4.12 for Ubuntu 22.04, and 2.4.41-4ubuntu3.21 for Ubuntu 20.04.
Who can be impacted by USN-6902-1?
Any user or organization running the affected versions of Apache2 on Ubuntu systems can be impacted by USN-6902-1.
Is there a workaround for USN-6902-1?
There are no specified workarounds for USN-6902-1 other than updating to the patched versions.