Wind River Support Network

HomeDefectsLIN1019-6677

Acknowledged

LIN1019-6677 : Security Advisory - apache2 - CVE-2019-17567

Created: Jun 3, 2021 Updated: Jul 14, 2022

Found In Version: 10.19.45.1

Severity: Standard

Applicable for: Wind River Linux LTS 19

Component/s: Userspace

Description

Apache HTTP Server versions 2.4.6 to 2.4.46 mod_proxy_wstunnel configured on an URL that is not necessarily Upgraded by the origin server was tunneling the whole connection regardless, thus allowing for subsequent requests on the same connection to pass through with no HTTP validation, authentication or authorization possibly configured.

https://nvd.nist.gov/vuln/detail/CVE-2019-17567