Linux · Security advisory · November 4, 2020
RHSA-2020:4751: Security update for 11 packages
RHSA-2020:4751, released November 4, 2020, fixes 10 CVEs across 11 products. None of them is reported as exploited. Patch Radar priority: High.
High
CVEs closed
10
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.8147
99th percentile
Priority of the 10 CVEs
Patch now 0
Urgent 0
High 3
Routine 7
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| httpd | RHEL 8 | 0:2.4.37-30.module+el8.3.0+7001+0766b9e7 |
| httpd-devel | RHEL 8 | 0:2.4.37-30.module+el8.3.0+7001+0766b9e7 |
| httpd-filesystem | RHEL 8 | 0:2.4.37-30.module+el8.3.0+7001+0766b9e7 |
| httpd-manual | RHEL 8 | 0:2.4.37-30.module+el8.3.0+7001+0766b9e7 |
| httpd-tools | RHEL 8 | 0:2.4.37-30.module+el8.3.0+7001+0766b9e7 |
| mod_http2 | RHEL 8 | 0:1.15.7-2.module+el8.3.0+7670+8bf57d29 |
| mod_ldap | RHEL 8 | 0:2.4.37-30.module+el8.3.0+7001+0766b9e7 |
| mod_md | RHEL 8 | 1:2.0.8-8.module+el8.3.0+6814+67d1e611 |
| mod_proxy_html | RHEL 8 | 1:2.4.37-30.module+el8.3.0+7001+0766b9e7 |
| mod_session | RHEL 8 | 0:2.4.37-30.module+el8.3.0+7001+0766b9e7 |
| mod_ssl | RHEL 8 | 1:2.4.37-30.module+el8.3.0+7001+0766b9e7 |
CVEs this fix closes
| Priority | CVE | Title | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| High | CVE-2019-10097 | httpd: The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server. The following p... | 7.2 | 0.5287 | None reported | |
| High | CVE-2019-10082 | httpd: The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server. The following p... | 9.1 | 0.1655 | None reported | |
| High | CVE-2019-10081 | httpd: The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server. The following p... | 7.5 | 0.1456 | None reported | |
| Routine | CVE-2019-10092 | httpd: The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server. The following p... | 6.1 | 0.8147 | None reported | |
| Routine | CVE-2019-10098 | libapache2-mod-proxy-uwsgi: In Apache HTTP server 2.4.0 to 2.4.39, Redirects configured withmod_rewrite that were intended to be self-referential... | 6.1 | 0.7398 | None reported | |
| Routine | CVE-2020-1927 | httpd: The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server. The following p... | 6.1 | 0.5669 | None reported | |
| Routine | CVE-2020-1934 | apache2-data: In Apache HTTP Server 2.4.0 to 2.4.41, mod_proxy_ftp may use uninitialized memory when proxying to a malicious FTP se... | 5.3 | 0.5195 | None reported | |
| Routine | CVE-2018-17189 | httpd: The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server. The following p... | 5.3 | 0.1940 | None reported | |
| Routine | CVE-2019-0196 | httpd: The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server. The following p... | 5.3 | 0.1930 | None reported | |
| Routine | CVE-2019-0197 | httpd: The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server. The following p... | 4.2 | 0.0829 | None reported |
Showing 1 to 10 of 10
1