UBUNTU-CVE-2023-25690

See a problem?
Please try reporting it to the source first.

Source

https://ubuntu.com/security/CVE-2023-25690

Import Source

https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-25690.json

JSON Data

https://api.osv.dev/v1/vulns/UBUNTU-CVE-2023-25690

Related

Published

2023-03-07T16:15:00Z

Modified

2024-10-15T14:11:23Z

Severity

9.8 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator

Summary

[none]

Details

Some modproxy configurations on Apache HTTP Server versions 2.4.0 through 2.4.55 allow a HTTP Request Smuggling attack. Configurations are affected when modproxy is enabled along with some form of RewriteRule or ProxyPassMatch in which a non-specific pattern matches some portion of the user-supplied request-target (URL) data and is then re-inserted into the proxied request-target using variable substitution. For example, something like: RewriteEngine on RewriteRule "^/here/(.*)" "http://example.com:8080/elsewhere?$1"; [P] ProxyPassReverse /here/ http://example.com:8080/ Request splitting/smuggling could result in bypass of access controls in the proxy server, proxying unintended URLs to existing origin servers, and cache poisoning. Users are recommended to update to at least version 2.4.56 of Apache HTTP Server.

References

Affected packages

Ubuntu:Pro:14.04:LTS / apache2

Package

Name: apache2
Purl: pkg:deb/ubuntu/apache2?arch=src?distro=trusty/esm

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

2.*

2.4.6-2ubuntu2

2.4.6-2ubuntu3

2.4.6-2ubuntu4

2.4.7-1ubuntu1

2.4.7-1ubuntu2

2.4.7-1ubuntu3

2.4.7-1ubuntu4

2.4.7-1ubuntu4.1

2.4.7-1ubuntu4.4

2.4.7-1ubuntu4.5

2.4.7-1ubuntu4.6

2.4.7-1ubuntu4.7

2.4.7-1ubuntu4.8

2.4.7-1ubuntu4.9

2.4.7-1ubuntu4.10

2.4.7-1ubuntu4.11

2.4.7-1ubuntu4.13

2.4.7-1ubuntu4.15

2.4.7-1ubuntu4.16

2.4.7-1ubuntu4.17

2.4.7-1ubuntu4.18

2.4.7-1ubuntu4.19

2.4.7-1ubuntu4.20

2.4.7-1ubuntu4.21

2.4.7-1ubuntu4.22

2.4.7-1ubuntu4.22+esm1

2.4.7-1ubuntu4.22+esm2

2.4.7-1ubuntu4.22+esm3

2.4.7-1ubuntu4.22+esm4

2.4.7-1ubuntu4.22+esm5

2.4.7-1ubuntu4.22+esm6

2.4.7-1ubuntu4.22+esm8

2.4.7-1ubuntu4.22+esm9

Ecosystem specific

{
    "ubuntu_priority": "medium"
}

Ubuntu:Pro:16.04:LTS / apache2

Package

Name: apache2
Purl: pkg:deb/ubuntu/apache2?arch=src?distro=esm-infra/xenial

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.4.18-2ubuntu3.17+esm10

Affected versions

2.*

2.4.12-2ubuntu2

2.4.17-1ubuntu1

2.4.17-2ubuntu1

2.4.17-3ubuntu1

2.4.18-1ubuntu1

2.4.18-2ubuntu1

2.4.18-2ubuntu2

2.4.18-2ubuntu3

2.4.18-2ubuntu3.1

2.4.18-2ubuntu3.2

2.4.18-2ubuntu3.3

2.4.18-2ubuntu3.4

2.4.18-2ubuntu3.5

2.4.18-2ubuntu3.7

2.4.18-2ubuntu3.8

2.4.18-2ubuntu3.9

2.4.18-2ubuntu3.10

2.4.18-2ubuntu3.12

2.4.18-2ubuntu3.13

2.4.18-2ubuntu3.14

2.4.18-2ubuntu3.15

2.4.18-2ubuntu3.17

2.4.18-2ubuntu3.17+esm1

2.4.18-2ubuntu3.17+esm2

2.4.18-2ubuntu3.17+esm3

2.4.18-2ubuntu3.17+esm4

2.4.18-2ubuntu3.17+esm5

2.4.18-2ubuntu3.17+esm6

2.4.18-2ubuntu3.17+esm7

2.4.18-2ubuntu3.17+esm8

2.4.18-2ubuntu3.17+esm9

Ecosystem specific

{
    "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro",
    "ubuntu_priority": "medium",
    "binaries": [
        {
            "binary_version": "2.4.18-2ubuntu3.17+esm10",
            "binary_name": "apache2"
        },
        {
            "binary_version": "2.4.18-2ubuntu3.17+esm10",
            "binary_name": "apache2-bin"
        },
        {
            "binary_version": "2.4.18-2ubuntu3.17+esm10",
            "binary_name": "apache2-bin-dbgsym"
        },
        {
            "binary_version": "2.4.18-2ubuntu3.17+esm10",
            "binary_name": "apache2-data"
        },
        {
            "binary_version": "2.4.18-2ubuntu3.17+esm10",
            "binary_name": "apache2-dbg"
        },
        {
            "binary_version": "2.4.18-2ubuntu3.17+esm10",
            "binary_name": "apache2-dbgsym"
        },
        {
            "binary_version": "2.4.18-2ubuntu3.17+esm10",
            "binary_name": "apache2-dev"
        },
        {
            "binary_version": "2.4.18-2ubuntu3.17+esm10",
            "binary_name": "apache2-dev-dbgsym"
        },
        {
            "binary_version": "2.4.18-2ubuntu3.17+esm10",
            "binary_name": "apache2-doc"
        },
        {
            "binary_version": "2.4.18-2ubuntu3.17+esm10",
            "binary_name": "apache2-suexec-custom"
        },
        {
            "binary_version": "2.4.18-2ubuntu3.17+esm10",
            "binary_name": "apache2-suexec-custom-dbgsym"
        },
        {
            "binary_version": "2.4.18-2ubuntu3.17+esm10",
            "binary_name": "apache2-suexec-pristine"
        },
        {
            "binary_version": "2.4.18-2ubuntu3.17+esm10",
            "binary_name": "apache2-suexec-pristine-dbgsym"
        },
        {
            "binary_version": "2.4.18-2ubuntu3.17+esm10",
            "binary_name": "apache2-utils"
        },
        {
            "binary_version": "2.4.18-2ubuntu3.17+esm10",
            "binary_name": "apache2-utils-dbgsym"
        }
    ]
}

Ubuntu:18.04:LTS / apache2

Package

Name: apache2
Purl: pkg:deb/ubuntu/apache2?arch=src?distro=bionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.4.29-1ubuntu4.27

Affected versions

2.*

2.4.27-2ubuntu3

2.4.29-1ubuntu1

2.4.29-1ubuntu2

2.4.29-1ubuntu3

2.4.29-1ubuntu4

2.4.29-1ubuntu4.1

2.4.29-1ubuntu4.2

2.4.29-1ubuntu4.3

2.4.29-1ubuntu4.4

2.4.29-1ubuntu4.5

2.4.29-1ubuntu4.6

2.4.29-1ubuntu4.7

2.4.29-1ubuntu4.8

2.4.29-1ubuntu4.10

2.4.29-1ubuntu4.11

2.4.29-1ubuntu4.12

2.4.29-1ubuntu4.13

2.4.29-1ubuntu4.14

2.4.29-1ubuntu4.16

2.4.29-1ubuntu4.17

2.4.29-1ubuntu4.18

2.4.29-1ubuntu4.19

2.4.29-1ubuntu4.20

2.4.29-1ubuntu4.21

2.4.29-1ubuntu4.22

2.4.29-1ubuntu4.23

2.4.29-1ubuntu4.24

2.4.29-1ubuntu4.25

2.4.29-1ubuntu4.26

Ecosystem specific

{
    "availability": "No subscription required",
    "ubuntu_priority": "medium",
    "binaries": [
        {
            "binary_version": "2.4.29-1ubuntu4.27",
            "binary_name": "apache2"
        },
        {
            "binary_version": "2.4.29-1ubuntu4.27",
            "binary_name": "apache2-bin"
        },
        {
            "binary_version": "2.4.29-1ubuntu4.27",
            "binary_name": "apache2-data"
        },
        {
            "binary_version": "2.4.29-1ubuntu4.27",
            "binary_name": "apache2-dbg"
        },
        {
            "binary_version": "2.4.29-1ubuntu4.27",
            "binary_name": "apache2-dev"
        },
        {
            "binary_version": "2.4.29-1ubuntu4.27",
            "binary_name": "apache2-doc"
        },
        {
            "binary_version": "2.4.29-1ubuntu4.27",
            "binary_name": "apache2-ssl-dev"
        },
        {
            "binary_version": "2.4.29-1ubuntu4.27",
            "binary_name": "apache2-suexec-custom"
        },
        {
            "binary_version": "2.4.29-1ubuntu4.27",
            "binary_name": "apache2-suexec-pristine"
        },
        {
            "binary_version": "2.4.29-1ubuntu4.27",
            "binary_name": "apache2-utils"
        }
    ]
}

Ubuntu:20.04:LTS / apache2

Package

Name: apache2
Purl: pkg:deb/ubuntu/apache2?arch=src?distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.4.41-4ubuntu3.14

Affected versions

2.*

2.4.41-1ubuntu1

2.4.41-4ubuntu1

2.4.41-4ubuntu2

2.4.41-4ubuntu3

2.4.41-4ubuntu3.1

2.4.41-4ubuntu3.3

2.4.41-4ubuntu3.4

2.4.41-4ubuntu3.5

2.4.41-4ubuntu3.6

2.4.41-4ubuntu3.7

2.4.41-4ubuntu3.8

2.4.41-4ubuntu3.9

2.4.41-4ubuntu3.10

2.4.41-4ubuntu3.11

2.4.41-4ubuntu3.12

2.4.41-4ubuntu3.13

Ecosystem specific

{
    "availability": "No subscription required",
    "ubuntu_priority": "medium",
    "binaries": [
        {
            "binary_version": "2.4.41-4ubuntu3.14",
            "binary_name": "apache2"
        },
        {
            "binary_version": "2.4.41-4ubuntu3.14",
            "binary_name": "apache2-bin"
        },
        {
            "binary_version": "2.4.41-4ubuntu3.14",
            "binary_name": "apache2-bin-dbgsym"
        },
        {
            "binary_version": "2.4.41-4ubuntu3.14",
            "binary_name": "apache2-data"
        },
        {
            "binary_version": "2.4.41-4ubuntu3.14",
            "binary_name": "apache2-dev"
        },
        {
            "binary_version": "2.4.41-4ubuntu3.14",
            "binary_name": "apache2-doc"
        },
        {
            "binary_version": "2.4.41-4ubuntu3.14",
            "binary_name": "apache2-ssl-dev"
        },
        {
            "binary_version": "2.4.41-4ubuntu3.14",
            "binary_name": "apache2-suexec-custom"
        },
        {
            "binary_version": "2.4.41-4ubuntu3.14",
            "binary_name": "apache2-suexec-custom-dbgsym"
        },
        {
            "binary_version": "2.4.41-4ubuntu3.14",
            "binary_name": "apache2-suexec-pristine"
        },
        {
            "binary_version": "2.4.41-4ubuntu3.14",
            "binary_name": "apache2-suexec-pristine-dbgsym"
        },
        {
            "binary_version": "2.4.41-4ubuntu3.14",
            "binary_name": "apache2-utils"
        },
        {
            "binary_version": "2.4.41-4ubuntu3.14",
            "binary_name": "apache2-utils-dbgsym"
        },
        {
            "binary_version": "2.4.41-4ubuntu3.14",
            "binary_name": "libapache2-mod-md"
        },
        {
            "binary_version": "2.4.41-4ubuntu3.14",
            "binary_name": "libapache2-mod-proxy-uwsgi"
        }
    ]
}

Ubuntu:22.04:LTS / apache2

Package

Name: apache2
Purl: pkg:deb/ubuntu/apache2?arch=src?distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.4.52-1ubuntu4.4

Affected versions

2.*

2.4.48-3.1ubuntu3

2.4.48-3.1ubuntu4

2.4.51-2ubuntu1

2.4.52-1ubuntu1

2.4.52-1ubuntu2

2.4.52-1ubuntu4

2.4.52-1ubuntu4.1

2.4.52-1ubuntu4.2

2.4.52-1ubuntu4.3

Ecosystem specific

{
    "availability": "No subscription required",
    "ubuntu_priority": "medium",
    "binaries": [
        {
            "binary_version": "2.4.52-1ubuntu4.4",
            "binary_name": "apache2"
        },
        {
            "binary_version": "2.4.52-1ubuntu4.4",
            "binary_name": "apache2-bin"
        },
        {
            "binary_version": "2.4.52-1ubuntu4.4",
            "binary_name": "apache2-bin-dbgsym"
        },
        {
            "binary_version": "2.4.52-1ubuntu4.4",
            "binary_name": "apache2-data"
        },
        {
            "binary_version": "2.4.52-1ubuntu4.4",
            "binary_name": "apache2-dev"
        },
        {
            "binary_version": "2.4.52-1ubuntu4.4",
            "binary_name": "apache2-doc"
        },
        {
            "binary_version": "2.4.52-1ubuntu4.4",
            "binary_name": "apache2-ssl-dev"
        },
        {
            "binary_version": "2.4.52-1ubuntu4.4",
            "binary_name": "apache2-suexec-custom"
        },
        {
            "binary_version": "2.4.52-1ubuntu4.4",
            "binary_name": "apache2-suexec-custom-dbgsym"
        },
        {
            "binary_version": "2.4.52-1ubuntu4.4",
            "binary_name": "apache2-suexec-pristine"
        },
        {
            "binary_version": "2.4.52-1ubuntu4.4",
            "binary_name": "apache2-suexec-pristine-dbgsym"
        },
        {
            "binary_version": "2.4.52-1ubuntu4.4",
            "binary_name": "apache2-utils"
        },
        {
            "binary_version": "2.4.52-1ubuntu4.4",
            "binary_name": "apache2-utils-dbgsym"
        },
        {
            "binary_version": "2.4.52-1ubuntu4.4",
            "binary_name": "libapache2-mod-md"
        },
        {
            "binary_version": "2.4.52-1ubuntu4.4",
            "binary_name": "libapache2-mod-proxy-uwsgi"
        }
    ]
}