CVE-2016-4975
Fixed in a distro release EPSS 20%
Possible CRLF injection allowing HTTP response splitting attacks for sites which use mod_userdir. This issue was mitigated by changes made in 2.4.25 and 2.2.32 which prohibit CR or LF injection into the "Location" or other outbound header key or value. Fixed in Apache HTTP Server 2.4.25 (Affected 2.4.1-2.4.23). Fixed in Apache HTTP Server 2.2.32 (Affected 2.2.0-2.2.31).
Products: Apache Software Foundation Apache HTTP Server
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | apache2 | 2.4.25-1 |
| Debian 13 | apache2 | 2.4.25-1 |
| Debian 14 | apache2 | 2.4.25-1 |
| Red Hat Enterprise Linux 7 | httpd | 0:2.4.6-45.el7_3.4 |
| Red Hat Enterprise Linux 7 | httpd-debuginfo | 0:2.4.6-45.el7_3.4 |
| Red Hat Enterprise Linux 7 | httpd-devel | 0:2.4.6-45.el7_3.4 |
| Red Hat Enterprise Linux 7 | httpd-manual | 0:2.4.6-45.el7_3.4 |
| Red Hat Enterprise Linux 7 | httpd-tools | 0:2.4.6-45.el7_3.4 |
| Red Hat Enterprise Linux 7 | mod_ldap | 0:2.4.6-45.el7_3.4 |
| Red Hat Enterprise Linux 7 | mod_proxy_html | 1:2.4.6-45.el7_3.4 |
| Red Hat Enterprise Linux 7 | mod_session | 0:2.4.6-45.el7_3.4 |
| Red Hat Enterprise Linux 7 | mod_ssl | 1:2.4.6-45.el7_3.4 |
| Red Hat jboss core services 1 | jbcs-httpd24-apache-commons-daemon | 0:1.1.0-1.redhat_2.1.jbcs.el7 |
| Red Hat jboss core services 1 | jbcs-httpd24-apache-commons-daemon | 0:1.1.0-1.redhat_2.1.jbcs.el6 |
| Red Hat jboss core services 1 | jbcs-httpd24-apache-commons-daemon-jsvc | 1:1.1.0-1.redhat_2.jbcs.el7 |
| Red Hat jboss core services 1 | jbcs-httpd24-apache-commons-daemon-jsvc | 1:1.1.0-1.redhat_2.jbcs.el6 |
| Red Hat jboss core services 1 | jbcs-httpd24-apache-commons-daemon-jsvc-debuginfo | 1:1.1.0-1.redhat_2.jbcs.el7 |
| Red Hat jboss core services 1 | jbcs-httpd24-apache-commons-daemon-jsvc-debuginfo | 1:1.1.0-1.redhat_2.jbcs.el6 |
| Red Hat jboss core services 1 | jbcs-httpd24-apr | 0:1.6.3-14.jbcs.el6 |
| Red Hat jboss core services 1 | jbcs-httpd24-apr | 0:1.6.3-14.jbcs.el7 |
| Red Hat jboss core services 1 | jbcs-httpd24-apr-debuginfo | 0:1.6.3-14.jbcs.el6 |
| Red Hat jboss core services 1 | jbcs-httpd24-apr-debuginfo | 0:1.6.3-14.jbcs.el7 |
| Red Hat jboss core services 1 | jbcs-httpd24-apr-devel | 0:1.6.3-14.jbcs.el7 |
| Red Hat jboss core services 1 | jbcs-httpd24-apr-devel | 0:1.6.3-14.jbcs.el6 |
| Red Hat jboss core services 1 | jbcs-httpd24-apr-util | 0:1.6.1-9.jbcs.el7 |
| Red Hat jboss core services 1 | jbcs-httpd24-apr-util | 0:1.6.1-9.jbcs.el6 |
| Red Hat jboss core services 1 | jbcs-httpd24-apr-util-debuginfo | 0:1.6.1-9.jbcs.el7 |
| Red Hat jboss core services 1 | jbcs-httpd24-apr-util-debuginfo | 0:1.6.1-9.jbcs.el6 |
| Red Hat jboss core services 1 | jbcs-httpd24-apr-util-devel | 0:1.6.1-9.jbcs.el7 |
| Red Hat jboss core services 1 | jbcs-httpd24-apr-util-devel | 0:1.6.1-9.jbcs.el6 |
| Red Hat jboss core services 1 | jbcs-httpd24-apr-util-ldap | 0:1.6.1-9.jbcs.el7 |
| Red Hat jboss core services 1 | jbcs-httpd24-apr-util-ldap | 0:1.6.1-9.jbcs.el6 |
| Red Hat jboss core services 1 | jbcs-httpd24-apr-util-mysql | 0:1.6.1-9.jbcs.el6 |
| Red Hat jboss core services 1 | jbcs-httpd24-apr-util-mysql | 0:1.6.1-9.jbcs.el7 |
| Red Hat jboss core services 1 | jbcs-httpd24-apr-util-nss | 0:1.6.1-9.jbcs.el7 |
| Red Hat jboss core services 1 | jbcs-httpd24-apr-util-nss | 0:1.6.1-9.jbcs.el6 |
| Red Hat jboss core services 1 | jbcs-httpd24-apr-util-odbc | 0:1.6.1-9.jbcs.el6 |
| Red Hat jboss core services 1 | jbcs-httpd24-apr-util-odbc | 0:1.6.1-9.jbcs.el7 |
| Red Hat jboss core services 1 | jbcs-httpd24-apr-util-openssl | 0:1.6.1-9.jbcs.el6 |
| Red Hat jboss core services 1 | jbcs-httpd24-apr-util-openssl | 0:1.6.1-9.jbcs.el7 |
| Red Hat jboss core services 1 | jbcs-httpd24-apr-util-pgsql | 0:1.6.1-9.jbcs.el7 |
| Red Hat jboss core services 1 | jbcs-httpd24-apr-util-pgsql | 0:1.6.1-9.jbcs.el6 |
| Red Hat jboss core services 1 | jbcs-httpd24-apr-util-sqlite | 0:1.6.1-9.jbcs.el7 |
| Red Hat jboss core services 1 | jbcs-httpd24-apr-util-sqlite | 0:1.6.1-9.jbcs.el6 |
| Red Hat jboss core services 1 | jbcs-httpd24-httpd | 0:2.4.29-17.jbcs.el7 |
| Red Hat jboss core services 1 | jbcs-httpd24-httpd | 0:2.4.29-17.jbcs.el6 |
| Red Hat jboss core services 1 | jbcs-httpd24-httpd-debuginfo | 0:2.4.29-17.jbcs.el7 |
| Red Hat jboss core services 1 | jbcs-httpd24-httpd-debuginfo | 0:2.4.29-17.jbcs.el6 |
| Red Hat jboss core services 1 | jbcs-httpd24-httpd-devel | 0:2.4.29-17.jbcs.el7 |
| Red Hat jboss core services 1 | jbcs-httpd24-httpd-devel | 0:2.4.29-17.jbcs.el6 |
| Red Hat jboss core services 1 | jbcs-httpd24-httpd-manual | 0:2.4.29-17.jbcs.el6 |
| Red Hat jboss core services 1 | jbcs-httpd24-httpd-manual | 0:2.4.29-17.jbcs.el7 |
| Red Hat jboss core services 1 | jbcs-httpd24-httpd-selinux | 0:2.4.29-17.jbcs.el6 |
| Red Hat jboss core services 1 | jbcs-httpd24-httpd-selinux | 0:2.4.29-17.jbcs.el7 |
| Red Hat jboss core services 1 | jbcs-httpd24-httpd-tools | 0:2.4.29-17.jbcs.el6 |
| Red Hat jboss core services 1 | jbcs-httpd24-httpd-tools | 0:2.4.29-17.jbcs.el7 |
| Red Hat jboss core services 1 | jbcs-httpd24-mod_auth_kerb | 0:5.4-36.jbcs.el6 |
| Red Hat jboss core services 1 | jbcs-httpd24-mod_auth_kerb | 0:5.4-36.jbcs.el7 |
| Red Hat jboss core services 1 | jbcs-httpd24-mod_auth_kerb-debuginfo | 0:5.4-36.jbcs.el6 |
| Red Hat jboss core services 1 | jbcs-httpd24-mod_auth_kerb-debuginfo | 0:5.4-36.jbcs.el7 |
| Red Hat jboss core services 1 | jbcs-httpd24-mod_bmx | 0:0.9.6-17.GA.jbcs.el6 |
| Red Hat jboss core services 1 | jbcs-httpd24-mod_bmx | 0:0.9.6-17.GA.jbcs.el7 |
| Red Hat jboss core services 1 | jbcs-httpd24-mod_bmx-debuginfo | 0:0.9.6-17.GA.jbcs.el7 |
| Red Hat jboss core services 1 | jbcs-httpd24-mod_bmx-debuginfo | 0:0.9.6-17.GA.jbcs.el6 |
| Red Hat jboss core services 1 | jbcs-httpd24-mod_cluster-native | 0:1.3.8-1.Final_redhat_2.jbcs.el7 |
| Red Hat jboss core services 1 | jbcs-httpd24-mod_cluster-native | 0:1.3.8-1.Final_redhat_2.jbcs.el6 |
| Red Hat jboss core services 1 | jbcs-httpd24-mod_cluster-native-debuginfo | 0:1.3.8-1.Final_redhat_2.jbcs.el7 |
| Red Hat jboss core services 1 | jbcs-httpd24-mod_cluster-native-debuginfo | 0:1.3.8-1.Final_redhat_2.jbcs.el6 |
| Red Hat jboss core services 1 | jbcs-httpd24-mod_jk | 0:1.2.43-1.redhat_1.jbcs.el7 |
| Red Hat jboss core services 1 | jbcs-httpd24-mod_jk | 0:1.2.43-1.redhat_1.jbcs.el6 |
| Red Hat jboss core services 1 | jbcs-httpd24-mod_jk-ap24 | 0:1.2.43-1.redhat_1.jbcs.el6 |
| Red Hat jboss core services 1 | jbcs-httpd24-mod_jk-ap24 | 0:1.2.43-1.redhat_1.jbcs.el7 |
| Red Hat jboss core services 1 | jbcs-httpd24-mod_jk-debuginfo | 0:1.2.43-1.redhat_1.jbcs.el6 |
| Red Hat jboss core services 1 | jbcs-httpd24-mod_jk-debuginfo | 0:1.2.43-1.redhat_1.jbcs.el7 |
| Red Hat jboss core services 1 | jbcs-httpd24-mod_jk-manual | 0:1.2.43-1.redhat_1.jbcs.el7 |
| Red Hat jboss core services 1 | jbcs-httpd24-mod_jk-manual | 0:1.2.43-1.redhat_1.jbcs.el6 |
| Red Hat jboss core services 1 | jbcs-httpd24-mod_ldap | 0:2.4.29-17.jbcs.el6 |
| Red Hat jboss core services 1 | jbcs-httpd24-mod_ldap | 0:2.4.29-17.jbcs.el7 |
| Red Hat jboss core services 1 | jbcs-httpd24-mod_proxy_html | 1:2.4.29-17.jbcs.el6 |
| Red Hat jboss core services 1 | jbcs-httpd24-mod_proxy_html | 1:2.4.29-17.jbcs.el7 |
| Red Hat jboss core services 1 | jbcs-httpd24-mod_rt | 0:2.4.1-19.GA.jbcs.el6 |
| Red Hat jboss core services 1 | jbcs-httpd24-mod_rt | 0:2.4.1-19.GA.jbcs.el7 |
| Red Hat jboss core services 1 | jbcs-httpd24-mod_rt-debuginfo | 0:2.4.1-19.GA.jbcs.el6 |
| Red Hat jboss core services 1 | jbcs-httpd24-mod_rt-debuginfo | 0:2.4.1-19.GA.jbcs.el7 |
| Red Hat jboss core services 1 | jbcs-httpd24-mod_security | 0:2.9.1-23.GA.jbcs.el7 |
| Red Hat jboss core services 1 | jbcs-httpd24-mod_security | 0:2.9.1-23.GA.jbcs.el6 |
| Red Hat jboss core services 1 | jbcs-httpd24-mod_security-debuginfo | 0:2.9.1-23.GA.jbcs.el7 |
| Red Hat jboss core services 1 | jbcs-httpd24-mod_security-debuginfo | 0:2.9.1-23.GA.jbcs.el6 |
| Red Hat jboss core services 1 | jbcs-httpd24-mod_session | 0:2.4.29-17.jbcs.el7 |
| Red Hat jboss core services 1 | jbcs-httpd24-mod_session | 0:2.4.29-17.jbcs.el6 |
| Red Hat jboss core services 1 | jbcs-httpd24-mod_ssl | 1:2.4.29-17.jbcs.el7 |
| Red Hat jboss core services 1 | jbcs-httpd24-mod_ssl | 1:2.4.29-17.jbcs.el6 |
| Red Hat jboss core services 1 | jbcs-httpd24-nghttp2 | 0:1.29.0-8.jbcs.el7 |
| Red Hat jboss core services 1 | jbcs-httpd24-nghttp2 | 0:1.29.0-8.jbcs.el6 |
| Red Hat jboss core services 1 | jbcs-httpd24-nghttp2-debuginfo | 0:1.29.0-8.jbcs.el7 |
| Red Hat jboss core services 1 | jbcs-httpd24-nghttp2-debuginfo | 0:1.29.0-8.jbcs.el6 |
| Red Hat jboss core services 1 | jbcs-httpd24-nghttp2-devel | 0:1.29.0-8.jbcs.el6 |
| Red Hat jboss core services 1 | jbcs-httpd24-nghttp2-devel | 0:1.29.0-8.jbcs.el7 |
| Red Hat jboss core services 1 | jbcs-httpd24-openssl | 1:1.0.2n-11.jbcs.el6 |
| Red Hat jboss core services 1 | jbcs-httpd24-openssl | 1:1.0.2n-11.jbcs.el7 |
| Red Hat jboss core services 1 | jbcs-httpd24-openssl-debuginfo | 1:1.0.2n-11.jbcs.el7 |
| Red Hat jboss core services 1 | jbcs-httpd24-openssl-debuginfo | 1:1.0.2n-11.jbcs.el6 |
| Red Hat jboss core services 1 | jbcs-httpd24-openssl-devel | 1:1.0.2n-11.jbcs.el7 |
| Red Hat jboss core services 1 | jbcs-httpd24-openssl-devel | 1:1.0.2n-11.jbcs.el6 |
| Red Hat jboss core services 1 | jbcs-httpd24-openssl-libs | 1:1.0.2n-11.jbcs.el7 |
| Red Hat jboss core services 1 | jbcs-httpd24-openssl-libs | 1:1.0.2n-11.jbcs.el6 |
| Red Hat jboss core services 1 | jbcs-httpd24-openssl-perl | 1:1.0.2n-11.jbcs.el7 |
| Red Hat jboss core services 1 | jbcs-httpd24-openssl-perl | 1:1.0.2n-11.jbcs.el6 |
| Red Hat jboss core services 1 | jbcs-httpd24-openssl-static | 1:1.0.2n-11.jbcs.el7 |
| Red Hat jboss core services 1 | jbcs-httpd24-openssl-static | 1:1.0.2n-11.jbcs.el6 |
| SUSE Enterprise Storage 4 | apache2 | 2.4.23-29.24.1 |
| SUSE Linux Enterprise Server 12 SP1-LTSS | apache2 | 2.4.16-20.19.1 |
| SUSE Linux Enterprise Server 12 SP2-BCL | apache2 | 2.4.23-29.24.1 |
| SUSE Linux Enterprise Server 12 SP2-LTSS | apache2 | 2.4.23-29.24.1 |
| SUSE Linux Enterprise Server 12 SP3 | apache2 | 2.4.23-29.24.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP1 | apache2 | 2.4.16-20.19.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP2 | apache2 | 2.4.23-29.24.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | apache2 | 2.4.23-29.24.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP3 | apache2 | 2.4.23-29.24.1 |
| SUSE OpenStack Cloud 7 | apache2 | 2.4.23-29.24.1 |
| Ubuntu 14.04 LTS | apache2 | 2.4.7-1ubuntu4.15 |
| Ubuntu 16.04 LTS | apache2 | 2.4.18-2ubuntu3.2 |