2017158b53
In Apache HTTP Server 2.4 releases 2.4.17 to 2.4.38, with MPM event, worker or prefork, code executing in less-privileged child processes or threads (including scripts executed by an in-process scripting interpreter) could execute arbitrary code with the privileges of the parent process (usually root) by manipulating the scoreboard. |
||
---|---|---|
.. | ||
4store | ||
apache-httpd | ||
apache-modules | ||
apt-cacher-ng | ||
couchdb | ||
darkhttpd | ||
gatling | ||
h2o | ||
hiawatha | ||
hyp | ||
jboss | ||
jetty | ||
lighttpd | ||
lwan | ||
micro-httpd | ||
mini-httpd | ||
myserver | ||
nginx | ||
nix-binary-cache | ||
openresty | ||
pshs | ||
redstore | ||
spawn-fcgi | ||
tengine | ||
thttpd | ||
tomcat | ||
unit | ||
webfs | ||
webhook | ||
winstone | ||
yaws |