Wind River Support Network

HomeDefectsLIN10-3671
Fixed

LIN10-3671 : Security Advisory - apache - CVE-2018-1312

Created: Apr 2, 2018    Updated: Dec 3, 2018
Resolved Date: Apr 24, 2018
Found In Version: 10.17.41.1
Fix Version: 10.17.41.7
Severity: Standard
Applicable for: Wind River Linux LTS 17
Component/s: Userspace

Description

In Apache httpd 2.2.0 to 2.4.29, when generating an HTTP Digest authentication challenge, the nonce sent to prevent reply attacks was not correctly generated using a pseudo-random seed. In a cluster of servers using a common Digest authentication configuration, HTTP requests could be replayed across servers by an attacker without detection.

https://nvd.nist.gov/vuln/detail/CVE-2018-1312

Other Downloads


CVEs


Live chat
Online