Apache: Multiple vulnerabilities — GLSA 201504-03

Multiple vulnerabilities have been found in Apache HTTP Server, the worst of which could lead to arbitrary code execution.

Affected packages

Background

Apache HTTP Server is one of the most popular web servers on the Internet.

Description

Multiple vulnerabilities have been discovered in Apache HTTP Server. Please review the CVE identifiers referenced below for details.

Impact

A remote attacker may be able to execute arbitrary code or cause a Denial of Service condition.

Workaround

There is no known workaround at this time.

Resolution

 # emerge --sync
 # emerge --ask --oneshot --verbose ">=www-servers/apache-2.2.29"
 

References

• CVE-2013-5704
• CVE-2014-0118
• CVE-2014-0226
• CVE-2014-0231

Release date
April 11, 2015

Latest revision
April 19, 2015: 2

Severity
normal

Exploitable
remote

Bugzilla entries

• 535948