Alert GCSA-18025 - Vulnerabilita' in Apache HTTP Server

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

******************************************************************

 Alert ID : GCSA-18025
     Data : 27 marzo 2018
   Titolo : Vulnerabilita' in Apache HTTP Server

******************************************************************


:: Descrizione del problema

E' stata rilasciata una nuova versione del server HTTP Apache
con la quale vengono risolte varie vulnerabilita'.


:: Software interessato

Apache HTTP Server 2.4.29 e precedenti


:: Impatto

Denial of service
Modifica di informazioni di sistema


:: Soluzioni

Aggiornare Apache all'ultima versione
http://httpd.apache.org/download.cgi


:: Riferimenti

Apache
http://httpd.apache.org/security/vulnerabilities_24.html

SecurityTracker
https://securitytracker.com/id/1040573
https://securitytracker.com/id/1040572
https://securitytracker.com/id/1040571
https://securitytracker.com/id/1040570
https://securitytracker.com/id/1040569
https://securitytracker.com/id/1040568

Mitre's CVE ID
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1303
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1302
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1301
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1312
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15715
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15710
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1283


GARR CERT Newsletter subscribe/unsubscribe:
http://www.cert.garr.it/alert/ricevi-gli-alert-di-cert
-----BEGIN PGP SIGNATURE-----

iD8DBQFauhS/wZxMk2USYEIRAmm8AKC3NHy1vmJPdA23LjTSCJWfju+nGgCdG8+7
plMyFDNrNdkW/c+FJZbCPnM=
=WuUk
-----END PGP SIGNATURE-----