Bugzilla will be upgraded to version 5.0. The upgrade date is tentatively scheduled for 2 December 2018, pending final testing and feedback.
First Last Prev Next    This bug is not in your last search results.
Bug 1341583 - (CVE-2016-4459) CVE-2016-4459 mod_cluster: Buffer overflow in mod_manager when sending request with long JVMRoute
CVE-2016-4459 mod_cluster: Buffer overflow in mod_manager when sending reques...
Status: NEW
Product: Security Response
Classification: Other
Component: vulnerability (Show other bugs)
unspecified
All Linux
low Severity low
: ---
: ---
Assigned To: Red Hat Product Security
impact=low,public=20161012,reported=2...
: Security
Depends On: 1341601 1341602
Blocks: 1341562 1395463
  Show dependency tree / graph
 
Reported: 2016-06-01 06:18 EDT by Timothy Walsh
Modified: 2018-03-08 16:05 EST (History)
25 users (show)

See Also:
Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
It was discovered that specifying configuration with a JVMRoute path longer than 80 characters will cause segmentation fault leading to a server crash.
Story Points: ---
Clone Of:
Environment:
Last Closed:
Type: ---
Regression: ---
Mount Type: ---
Documentation: ---
CRM:
Verified Versions:
Category: ---
oVirt Team: ---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: ---

Attachments (Terms of Use)
Add an attachment (proposed patch, testcase, etc.)


External Trackers
Tracker ID Priority Status Summary Last Updated
Red Hat Product Errata RHSA-2016:2054 normal SHIPPED_LIVE Moderate: Red Hat JBoss Enterprise Application Platform 6.4.10 natives update on RHEL 7 2017-03-23 18:23:49 EDT
Red Hat Product Errata RHSA-2016:2055 normal SHIPPED_LIVE Moderate: Red Hat JBoss Enterprise Application Platform 6.4.10 natives update on RHEL 6 2017-02-21 00:08:14 EST
Red Hat Product Errata RHSA-2016:2056 normal SHIPPED_LIVE Important: Red Hat JBoss Enterprise Application Platform 6.4.10 update 2016-10-12 16:57:34 EDT
Red Hat Product Errata RHSA-2016:2957 normal SHIPPED_LIVE Important: Red Hat JBoss Core Services Apache HTTP 2.4.23 Release 2016-12-15 22:11:19 EST
Red Hat Product Errata RHSA-2017:0193 normal SHIPPED_LIVE Important: Red Hat JBoss Core Services Apache HTTP Server 2.4.23 Release on RHEL 6 2017-01-25 20:05:09 EST
Red Hat Product Errata RHSA-2017:0194 normal SHIPPED_LIVE Important: Red Hat JBoss Core Services Apache HTTP Server 2.4.23 Release on RHEL 7 2017-01-25 20:04:50 EST

  None (edit)
Description Timothy Walsh 2016-06-01 06:18:03 EDT 
Configuration of mod_cluster via JVMRoute longer than 80 characters will cause segfault.

A segmentation fault can occur in Apache HTTPD 2.2. 

The crash is due to a strcpy buffer overflow in mod_cluster's mod_manager.

https://github.com/modcluster/mod_cluster/blob/1.2.9.Final/native/mod_manager/node.c#L227 [Open URL]

If clients send a request with a JVMRoute longer than 80 characters
(the size of the strcpy destination), the strcpy segfaults.
Comment 6 Timothy Walsh 2016-06-01 23:49:36 EDT 

Acknowledgments:

Name: Robert Bost (Red Hat)
Comment 10 errata-xmlrpc 2016-10-12 13:02:35 EDT 
This issue has been addressed in the following products:

  Red Hat JBoss Enterprise Application Platform 6.4.10

Via RHSA-2016:2056 https://rhn.redhat.com/errata/RHSA-2016-2056.html
Comment 11 errata-xmlrpc 2016-10-12 13:09:41 EDT 
This issue has been addressed in the following products:

  Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7

Via RHSA-2016:2054 https://rhn.redhat.com/errata/RHSA-2016-2054.html
Comment 12 errata-xmlrpc 2016-10-12 13:20:27 EDT 
This issue has been addressed in the following products:

  Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6

Via RHSA-2016:2055 https://rhn.redhat.com/errata/RHSA-2016-2055.html
Comment 13 errata-xmlrpc 2016-12-15 17:20:24 EST 
This issue has been addressed in the following products:



Via RHSA-2016:2957 https://rhn.redhat.com/errata/RHSA-2016-2957.html
Comment 14 errata-xmlrpc 2017-01-25 15:05:50 EST 
This issue has been addressed in the following products:

  JBoss Core Services on RHEL 7

Via RHSA-2017:0194 https://access.redhat.com/errata/RHSA-2017:0194
Comment 15 errata-xmlrpc 2017-01-25 15:07:17 EST 
This issue has been addressed in the following products:

  JBoss Core Services on RHEL 6

Via RHSA-2017:0193 https://access.redhat.com/errata/RHSA-2017:0193
Note You need to log in before you can comment on or make changes to this bug.
First Last Prev Next    This bug is not in your last search results.