Apache 2.2 취약점 패치 정보.(2.2.15 ~ 2.2.34)

Tech Note 정보
카테고리: [ Apache HTTP Server ]
조회수: 7140

 

 Apache 2.2.14이후 부터 지원종료된 Apache 2.2.34 까지 취약점 조치된 CVE 리스트이다.

 옆의 점수는 CVSS 점수이며, 숫자가 높을수록 고위험 취약점이다.

1) 저위험군: 0.1~3.9점
2) 중위험군: 4.0~6.9점
3) 고위험군: 7.0~8.9점
4) 치명적 위험군: 9.0~10.0점

Apache 2.2.14 Release Date: 05 Oct 2009

Apache 2.2.34 Release Date: 11 Jul 2017

 

=====================================================================

Changes with Apache 2.2.34 (final)

 

  *) SECURITY: CVE-2017-9788 (cve.mitre.org) 6.4

 

Changes with Apache 2.2.33 (not released)

 

  *) SECURITY: CVE-2017-7668 (cve.mitre.org) 7.5

  *) SECURITY: CVE-2017-3169 (cve.mitre.org) 7.5

  *) SECURITY: CVE-2017-3167 (cve.mitre.org) 7.5

  *) SECURITY: CVE-2017-7679 (cve.mitre.org) 7.5

 

Changes with Apache 2.2.32

 

  *) SECURITY: CVE-2016-8743 (cve.mitre.org) 5.0

 

Changes with Apache 2.2.30 (not released)

 

  *) SECURITY: CVE-2015-3183 (cve.mitre.org) 5.0

 

Changes with Apache 2.2.28 (not released)

 

  *) SECURITY: CVE-2014-0118 (cve.mitre.org) 4.3

  *) SECURITY: CVE-2014-0231 (cve.mitre.org) 5.0

  *) SECURITY: CVE-2014-0226 (cve.mitre.org) 6.8

  *) SECURITY: CVE-2013-5704 (cve.mitre.org) 5.0

 

Changes with Apache 2.2.27

 

  *) SECURITY: CVE-2014-0098 (cve.mitre.org) 5.0

  *) SECURITY: CVE-2013-6438 (cve.mitre.org) 5.0

 

Changes with Apache 2.2.25

 

  *) SECURITY: CVE-2013-1896 (cve.mitre.org) 4.3

  *) SECURITY: CVE-2013-1862 (cve.mitre.org) 5.1

 

Changes with Apache 2.2.24

 

  *) SECURITY: CVE-2012-3499 (cve.mitre.org) 4.3

  *) SECURITY: CVE-2012-4558 (cve.mitre.org) 4.3

 

Changes with Apache 2.2.23

 

  *) SECURITY: CVE-2012-0883 (cve.mitre.org) 6.9

  *) SECURITY: CVE-2012-2687 (cve.mitre.org) 2.6

 

Changes with Apache 2.2.22

 

  *) SECURITY: CVE-2011-3368 (cve.mitre.org) 5.0

  *) SECURITY: CVE-2011-3607 (cve.mitre.org) 4.4

  *) SECURITY: CVE-2011-4317 (cve.mitre.org) 4.3

  *) SECURITY: CVE-2012-0021 (cve.mitre.org) 2.6

  *) SECURITY: CVE-2012-0031 (cve.mitre.org) 4.6

  *) SECURITY: CVE-2012-0053 (cve.mitre.org) 4.3

  *) SECURITY: CVE-2012-4557 (cve.mitre.org) 5.0

 

Changes with Apache 2.2.21

 

  *) SECURITY: CVE-2011-3348 (cve.mitre.org) 4.3

 

Changes with Apache 2.2.20

 

  *) SECURITY: CVE-2011-3192 (cve.mitre.org) 7.8

 

Changes with Apache 2.2.16

 

  *) SECURITY: CVE-2010-1452 (cve.mitre.org) 5.0

  *) SECURITY: CVE-2010-2068 (cve.mitre.org) 5.0

 

Changes with Apache 2.2.15

 

  *) SECURITY: CVE-2009-3555 (cve.mitre.org) 5.8

  *) SECURITY: CVE-2009-3555 (cve.mitre.org) 5.8

  *) SECURITY: CVE-2010-0408 (cve.mitre.org) 5.0

  *) SECURITY: CVE-2010-0425 (cve.mitre.org) 10.0

*) SECURITY: CVE-2010-0434 (cve.mitre.org) 4.3