CVE:CVE-2018-1312
CNNVD:CNNVD-201803-936
Apache httpd是美国阿帕奇（Apache）软件基金会的一款专为现代操作系统开发和维护的开源HTTP服务器。mod_auth_digest module是其中的一个HTTP缓存过滤器模块。
Apache httpd 2.2.0版本至2.4.29版本中的mod_auth_digest模块存在安全漏洞,该漏洞源于程序没有正确的生成nonce值。攻击者可利用该漏洞重播目标系统的HTTP请求。
solution:Upgrade apache http_server to a higher version than 2.4.1,2.4.2,2.4.3,2.4.4,2.4.6,2.4.7,2.4.9,2.4.10,2.4.12,2.4.16,2.4.17,2.4.18,2.4.20,2.4.23,2.4.25,2.4.26,2.4.27,2.4.28,2.4.29,and avoid the version 2.4.1,2.4.2,2.4.3,2.4.4,2.4.6,2.4.7,2.4.9,2.4.10,2.4.12,2.4.16,2.4.17,2.4.18,2.4.20,2.4.23,2.4.25,2.4.26,2.4.27,2.4.28,2.4.29; Upgrade canonical ubuntu_linux to a higher version than 12.04,14.04,16.04,17.10,18.04,and avoid the version 12.04,14.04,16.04,17.10,18.04; Upgrade debian debian_linux to a higher version than 7.0,8.0,9.0,and avoid the version 7.0,8.0,9.0; Upgrade netapp cloud_backup to a higher version than -; Upgrade netapp storagegrid to a higher version than -; Upgrade netapp clustered_data_ontap to a higher version than -; Upgrade redhat jboss_core_services to a higher version than 1.0,and avoid the version 1.0; Upgrade redhat enterprise_linux_desktop to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_eus to a higher version than 7.6,and avoid the version 7.6; Upgrade redhat enterprise_linux_server to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_server_aus to a higher version than 7.6,and avoid the version 7.6; Upgrade redhat enterprise_linux_server_tus to a higher version than 7.6,and avoid the version 7.6; Upgrade redhat enterprise_linux_workstation to a higher version than 7.0,and avoid the version 7.0