{"id":"USN-5487-2","summary":"apache2 regression","details":"USN-5487-1 fixed several vulnerabilities in Apache. Unfortunately, that update introduced\na regression when proxying balancer manager connections in some configurations\non Ubuntu 14.04 ESM. This update reverts those changes till further fix.\n\nWe apologize for the inconvenience.\n\nOriginal advisory details:\n\n It was discovered that Apache HTTP Server mod_proxy_ajp incorrectly handled\n certain crafted request. A remote attacker could possibly use this issue to\n perform an HTTP Request Smuggling attack. (CVE-2022-26377)\n \n It was discovered that Apache HTTP Server incorrectly handled certain\n request. An attacker could possibly use this issue to cause a denial\n of service. (CVE-2022-28614)\n \n It was discovered that Apache HTTP Server incorrectly handled certain request.\n An attacker could possibly use this issue to cause a crash or expose\n sensitive information. (CVE-2022-28615)\n \n It was discovered that Apache HTTP Server incorrectly handled certain request.\n An attacker could possibly use this issue to cause a denial of service.\n (CVE-2022-29404)\n \n It was discovered that Apache HTTP Server incorrectly handled certain\n request. An attacker could possibly use this issue to cause a crash.\n (CVE-2022-30522)\n \n It was discovered that Apache HTTP Server incorrectly handled certain request.\n An attacker could possibly use this issue to execute arbitrary code or cause\n a crash. (CVE-2022-30556)\n \n It was discovered that Apache HTTP Server incorrectly handled certain request.\n An attacker could possibly use this issue to bypass IP based authentication.\n (CVE-2022-31813)\n","modified":"2026-04-22T10:44:14.475055Z","published":"2022-06-23T09:29:28Z","related":["UBUNTU-CVE-2022-26377","UBUNTU-CVE-2022-28614","UBUNTU-CVE-2022-28615","UBUNTU-CVE-2022-29404","UBUNTU-CVE-2022-30522","UBUNTU-CVE-2022-30556","UBUNTU-CVE-2022-31813"],"references":[{"type":"ADVISORY","url":"https://ubuntu.com/security/notices/USN-5487-2"},{"type":"REPORT","url":"https://launchpad.net/bugs/1979577"}],"affected":[{"package":{"name":"apache2","ecosystem":"Ubuntu:Pro:14.04:LTS","purl":"pkg:deb/ubuntu/apache2@2.4.7-1ubuntu4.22+esm6?arch=source&distro=trusty/esm"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.7-1ubuntu4.22+esm6"}]}],"versions":["2.4.6-2ubuntu2","2.4.6-2ubuntu3","2.4.6-2ubuntu4","2.4.7-1ubuntu1","2.4.7-1ubuntu2","2.4.7-1ubuntu3","2.4.7-1ubuntu4","2.4.7-1ubuntu4.1","2.4.7-1ubuntu4.4","2.4.7-1ubuntu4.5","2.4.7-1ubuntu4.6","2.4.7-1ubuntu4.7","2.4.7-1ubuntu4.8","2.4.7-1ubuntu4.9","2.4.7-1ubuntu4.10","2.4.7-1ubuntu4.11","2.4.7-1ubuntu4.13","2.4.7-1ubuntu4.15","2.4.7-1ubuntu4.16","2.4.7-1ubuntu4.17","2.4.7-1ubuntu4.18","2.4.7-1ubuntu4.19","2.4.7-1ubuntu4.20","2.4.7-1ubuntu4.21","2.4.7-1ubuntu4.22","2.4.7-1ubuntu4.22+esm1","2.4.7-1ubuntu4.22+esm2","2.4.7-1ubuntu4.22+esm3","2.4.7-1ubuntu4.22+esm4","2.4.7-1ubuntu4.22+esm5"],"ecosystem_specific":{"availability":"Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro","binaries":[{"binary_name":"apache2","binary_version":"2.4.7-1ubuntu4.22+esm6"},{"binary_name":"apache2-bin","binary_version":"2.4.7-1ubuntu4.22+esm6"},{"binary_name":"apache2-data","binary_version":"2.4.7-1ubuntu4.22+esm6"},{"binary_name":"apache2-mpm-event","binary_version":"2.4.7-1ubuntu4.22+esm6"},{"binary_name":"apache2-mpm-itk","binary_version":"2.4.7-1ubuntu4.22+esm6"},{"binary_name":"apache2-mpm-prefork","binary_version":"2.4.7-1ubuntu4.22+esm6"},{"binary_name":"apache2-mpm-worker","binary_version":"2.4.7-1ubuntu4.22+esm6"},{"binary_name":"apache2-suexec","binary_version":"2.4.7-1ubuntu4.22+esm6"},{"binary_name":"apache2-suexec-custom","binary_version":"2.4.7-1ubuntu4.22+esm6"},{"binary_name":"apache2-suexec-pristine","binary_version":"2.4.7-1ubuntu4.22+esm6"},{"binary_name":"apache2-utils","binary_version":"2.4.7-1ubuntu4.22+esm6"},{"binary_name":"apache2.2-bin","binary_version":"2.4.7-1ubuntu4.22+esm6"},{"binary_name":"libapache2-mod-macro","binary_version":"1:2.4.7-1ubuntu4.22+esm6"},{"binary_name":"libapache2-mod-proxy-html","binary_version":"1:2.4.7-1ubuntu4.22+esm6"}]},"database_specific":{"cves_map":{"cves":[],"ecosystem":"Ubuntu:Pro:14.04:LTS"},"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-5487-2.json"}}],"schema_version":"1.7.5"}