Risk | Medium |
Patch available | YES |
Number of vulnerabilities | 3 |
CVE-ID | CVE-2018-17199 CVE-2018-17189 CVE-2019-0190 |
CWE-ID | CWE-284 CWE-20 CWE-835 |
Exploitation vector | Network |
Public exploit | N/A |
Vulnerable software Subscribe |
Amazon Linux AMI Operating systems & Components / Operating system |
Vendor | Amazon Web Services |
Security Bulletin
This security bulletin contains information about 3 vulnerabilities.
EUVDB-ID: #VU17178
Risk: Low
CVSSv3.1: 6.4 [CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:U/RL:O/RC:C]
CVE-ID: CVE-2018-17199
CWE-ID:
CWE-284 - Improper Access Control
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to bypass security restrictions on the target system.
The weakness exists due to mod_session checks the session expiry time before decoding the session. A remote attacker сan cause session expiry time to be ignored for mod_session_cookie sessions since the expiry time is loaded when the session is decoded and reuse old session credentials or session IDs, which the attacker could use to access web pages previously accessed by a targeted user.
Update the affected packages:
i686:Vulnerable software versions
mod24_md-2.4.38-1.86.amzn1.i686
mod24_session-2.4.38-1.86.amzn1.i686
httpd24-debuginfo-2.4.38-1.86.amzn1.i686
mod24_ssl-2.4.38-1.86.amzn1.i686
httpd24-2.4.38-1.86.amzn1.i686
mod24_ldap-2.4.38-1.86.amzn1.i686
httpd24-tools-2.4.38-1.86.amzn1.i686
httpd24-devel-2.4.38-1.86.amzn1.i686
mod24_proxy_html-2.4.38-1.86.amzn1.i686
noarch:
httpd24-manual-2.4.38-1.86.amzn1.noarch
src:
httpd24-2.4.38-1.86.amzn1.src
x86_64:
httpd24-debuginfo-2.4.38-1.86.amzn1.x86_64
mod24_proxy_html-2.4.38-1.86.amzn1.x86_64
httpd24-2.4.38-1.86.amzn1.x86_64
mod24_ssl-2.4.38-1.86.amzn1.x86_64
mod24_md-2.4.38-1.86.amzn1.x86_64
mod24_session-2.4.38-1.86.amzn1.x86_64
httpd24-devel-2.4.38-1.86.amzn1.x86_64
mod24_ldap-2.4.38-1.86.amzn1.x86_64
httpd24-tools-2.4.38-1.86.amzn1.x86_64
Amazon Linux AMI: All versions
External linkshttp://alas.aws.amazon.com/ALAS-2019-1166.html
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
EUVDB-ID: #VU17177
Risk: Medium
CVSSv3.1: 6.5 [CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]
CVE-ID: CVE-2018-17189
CWE-ID:
CWE-20 - Improper input validation
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to cause DoS condition on the target system.
The weakness exists due to an error when handling malicious input. A remote attacker can send a specially crafted request bodies in a slow loris way to plain resources and cause the h2 stream for that request unnecessarily occupied a server thread cleaning up that incoming data.
Update the affected packages:
i686:Vulnerable software versions
mod24_md-2.4.38-1.86.amzn1.i686
mod24_session-2.4.38-1.86.amzn1.i686
httpd24-debuginfo-2.4.38-1.86.amzn1.i686
mod24_ssl-2.4.38-1.86.amzn1.i686
httpd24-2.4.38-1.86.amzn1.i686
mod24_ldap-2.4.38-1.86.amzn1.i686
httpd24-tools-2.4.38-1.86.amzn1.i686
httpd24-devel-2.4.38-1.86.amzn1.i686
mod24_proxy_html-2.4.38-1.86.amzn1.i686
noarch:
httpd24-manual-2.4.38-1.86.amzn1.noarch
src:
httpd24-2.4.38-1.86.amzn1.src
x86_64:
httpd24-debuginfo-2.4.38-1.86.amzn1.x86_64
mod24_proxy_html-2.4.38-1.86.amzn1.x86_64
httpd24-2.4.38-1.86.amzn1.x86_64
mod24_ssl-2.4.38-1.86.amzn1.x86_64
mod24_md-2.4.38-1.86.amzn1.x86_64
mod24_session-2.4.38-1.86.amzn1.x86_64
httpd24-devel-2.4.38-1.86.amzn1.x86_64
mod24_ldap-2.4.38-1.86.amzn1.x86_64
httpd24-tools-2.4.38-1.86.amzn1.x86_64
Amazon Linux AMI: All versions
External linkshttp://alas.aws.amazon.com/ALAS-2019-1166.html
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
EUVDB-ID: #VU17179
Risk: Medium
CVSSv3.1: 6.5 [CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]
CVE-ID: CVE-2019-0190
CWE-ID:
CWE-835 - Loop with Unreachable Exit Condition ('Infinite Loop')
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to cause DoS condition on the target system.
The weakness exists in the mod_ssl module due to improper handling of renegotiation attempts when OpenSSL 1.1.1 or later is used. A remote attacker can send a specially crafted request that submits malicious input, trigger mod_ssl loop and cause the service to crash.
Update the affected packages:
i686:Vulnerable software versions
mod24_md-2.4.38-1.86.amzn1.i686
mod24_session-2.4.38-1.86.amzn1.i686
httpd24-debuginfo-2.4.38-1.86.amzn1.i686
mod24_ssl-2.4.38-1.86.amzn1.i686
httpd24-2.4.38-1.86.amzn1.i686
mod24_ldap-2.4.38-1.86.amzn1.i686
httpd24-tools-2.4.38-1.86.amzn1.i686
httpd24-devel-2.4.38-1.86.amzn1.i686
mod24_proxy_html-2.4.38-1.86.amzn1.i686
noarch:
httpd24-manual-2.4.38-1.86.amzn1.noarch
src:
httpd24-2.4.38-1.86.amzn1.src
x86_64:
httpd24-debuginfo-2.4.38-1.86.amzn1.x86_64
mod24_proxy_html-2.4.38-1.86.amzn1.x86_64
httpd24-2.4.38-1.86.amzn1.x86_64
mod24_ssl-2.4.38-1.86.amzn1.x86_64
mod24_md-2.4.38-1.86.amzn1.x86_64
mod24_session-2.4.38-1.86.amzn1.x86_64
httpd24-devel-2.4.38-1.86.amzn1.x86_64
mod24_ldap-2.4.38-1.86.amzn1.x86_64
httpd24-tools-2.4.38-1.86.amzn1.x86_64
Amazon Linux AMI: All versions
External linkshttp://alas.aws.amazon.com/ALAS-2019-1166.html
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.