tocsin

Debian/apache2: unknown

protocol.c in the Apache HTTP Server 2.2.x through 2.2.21 does not properly restrict header information during construction of Bad Request (aka 400) error documents, which allows remote attackers to o

Action: Upgrade apache2 to 2.2.22-1 or later.

Affected

introducedfixedlast affected
02.2.22-1-

Fixed versions

2.2.22-1

Sources

published · modified · JSON