Loading vulnerability…
Denial of Service in Apache HTTP Server mod_cache_socache
CVE-2018-1303 is an out-of-bounds read vulnerability in Apache HTTP Server's mod_cache_socache module. A specially crafted HTTP request header can trigger invalid memory access during request-header parsing while data is prepared for shared-memory caching, potentially crashing the server and causing denial of service. The vulnerability affects configurations using mod_cache_socache; mod_cache_disk is unaffected.
What it means and what to do now: patch path, interim mitigations, and the assume-compromise checklist.
What an attacker gets, and what they’ve been doing with it.
Remote attackers can cause an application crash and disrupt HTTP service availability on affected servers using mod_cache_socache. Information disclosure and code execution are not established for this vulnerability.
If you can’t patch tonight, do this now.
Disable mod_cache_socache or replace its shared-memory caching configuration with mod_cache_disk, which is unaffected by this vulnerability, until a fixed package can be deployed.
Patch, then assume compromise.
Upgrade to Apache HTTP Server 2.4.33 or a later supported release, or install a vendor package containing the request-header parsing fix. For Red Hat Enterprise Linux 7, RHSA-2020:3958 supplies the fix in httpd 2.4.6-95.el7. For affected Symantec Content Analysis 3.1 installations, upgrade to 3.1.3.2; for affected Security Analytics installations, migrate to a fixed release such as 8.1.1.
No public exploits tracked yet. Mallory keeps watching.
Products and vendors Mallory has correlated with this vulnerability. Open in Mallory to drill down to specific CPE configurations and version ranges.
5 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.