{"id":3121,"date":"2019-04-04T13:50:23","date_gmt":"2019-04-04T13:50:23","guid":{"rendered":"https:\/\/www.fastcomet.com\/blog\/?p=2900"},"modified":"2022-06-10T06:04:35","modified_gmt":"2022-06-10T06:04:35","slug":"apache-vulnerability-patching","status":"publish","type":"post","link":"https:\/\/www.fastcomet.com\/blog\/apache-vulnerability-patching","title":{"rendered":"Apache Vulnerability – Crucial Patching"},"content":{"rendered":"\n

The Apache HTTP Server is among the top choices when it comes to web server software, powering almost 40% of the internet. When such a widely spread software has a problem in its base structure, It\u2019s crucial to have it fixed as soon as possible. In the event where new vulnerabilities come to the surface, the next course of action is fixing them and, in a later point in time, disclose them to the public. With that said, we would like to spread awareness of some latest Apache HTTP Server vulnerabilities.<\/p>\n\n\n\n\n\n\n\n

Three CVE\u2019s (Common Vulnerabilities and Exposures) were made public on the 2nd of April. The exploit itself affects all versions from 2.4.17 to 2.4.38<\/strong>. It consists of executing code on the root machine, via code manipulation at a given cycle. Basically, it could allow any less privileged user to be able to execute arbitrary code with the needed root privileges on the target server. Rest assured that this is not a delayed April fools joke.<\/p>\n\n\n\n

The information provided is as interpreted from official statements: (CVE-2019-0211) (CVE-2019-0217) (CVE-2019-0215).<\/p>\n\n\n\n

What Harm Can Potentially Happen?<\/h2>\n\n\n\n

The flaw affects all previous versions of the Apache HTTP Server. The exploit itself can only be a target of Shared Hosting environments or any configuration where you have multiple users on the same server, with active permissions to upload and execute. Without an active user on the server, it does not pose a threat.<\/p>\n\n\n\n

In a vulnerable environment, this flaw could lead to catastrophic damage. Any user on the Apache HTTP Server could potentially (if done correctly) gain root privileges on the machine, thus increasing usage of all other users\u2019 content files on the same server.<\/p>\n\n\n\n

Does this Affect Me?<\/h2>\n\n\n\n

As you should expect from FastComet, we did not lose any precious time taking the needed actions under these circumstances and we immediately started patching the Apache vulnerability. We have already taken the measure of mass-updating all of our shared hosting servers, as well as our clients on VPS\/Dedicated Server packages. In the rare occasion that update did not go through, we urge our clients to give us a visit either via Live Chat or Ticket and we will manually force update their Apache versions.<\/p>\n\n\n\n

How do I Check my Apache Version?<\/h2>\n\n\n\n

The easiest way to check is to enter any cPanel<\/a> account on a given server and then click \u201cServer Information\u201d<\/p>\n\n\n\n

\"Check<\/figure>\n\n\n\n

The version you are looking to have is version 2.4.39 or above<\/strong>.<\/p>\n\n\n

\n
\"\"<\/figure>\n<\/div>\n\n\n
\"Apache<\/figure>\n\n\n\n

Security is Key!<\/h2>\n\n\n\n

Always keep in mind that security is one of the most important aspects of web hosting technology. It is not that hard to keep track of, and FastComet will always make sure to help with whatever possible. In case you have any questions, feel free to post them as comments and we will gladly address them.<\/p>\n","protected":false},"excerpt":{"rendered":"

The Apache HTTP Server is among the top choices when it comes to web server software, powering almost 40% of the internet. When such a widely spread software has a problem in its base structure, It\u2019s crucial to have it fixed as soon as possible. In the event where new vulnerabilities come to the surface, […]<\/p>\n","protected":false},"author":11,"featured_media":2939,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[140],"tags":[91,75],"class_list":["post-3121","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-security","tag-apache","tag-vulnerability"],"featured_image_src":"https:\/\/www.fastcomet.com\/blog\/wp-content\/uploads\/2019\/04\/apache-patch_v3.jpg","author_info":{"display_name":"Daniel G.","author_link":"https:\/\/www.fastcomet.com\/blog\/author\/danielg"},"yoast_head":"\nApache Vulnerability - Crucial Patching | FastComet<\/title>\n<meta name=\"description\" content=\"A new important Apache vulnerability in Apache HTTP Server software was recently discovered. ? Check our takes on this critical update.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.fastcomet.com\/blog\/apache-vulnerability-patching\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Apache Vulnerability - Crucial Patching | FastComet\" \/>\n<meta property=\"og:description\" content=\"A new important Apache vulnerability in Apache HTTP Server software was recently discovered. ? Check our takes on this critical update.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.fastcomet.com\/blog\/apache-vulnerability-patching\" \/>\n<meta property=\"og:site_name\" content=\"FastComet Blog\" \/>\n<meta property=\"article:published_time\" content=\"2019-04-04T13:50:23+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2022-06-10T06:04:35+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.fastcomet.com\/blog\/wp-content\/uploads\/2019\/04\/apache-patch_v3.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1024\" \/>\n\t<meta property=\"og:image:height\" content=\"620\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Daniel G.\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Daniel G.\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Apache Vulnerability - Crucial Patching | FastComet","description":"A new important Apache vulnerability in Apache HTTP Server software was recently discovered. ? Check our takes on this critical update.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.fastcomet.com\/blog\/apache-vulnerability-patching","og_locale":"en_US","og_type":"article","og_title":"Apache Vulnerability - Crucial Patching | FastComet","og_description":"A new important Apache vulnerability in Apache HTTP Server software was recently discovered. ? Check our takes on this critical update.","og_url":"https:\/\/www.fastcomet.com\/blog\/apache-vulnerability-patching","og_site_name":"FastComet Blog","article_published_time":"2019-04-04T13:50:23+00:00","article_modified_time":"2022-06-10T06:04:35+00:00","og_image":[{"width":1024,"height":620,"url":"https:\/\/www.fastcomet.com\/blog\/wp-content\/uploads\/2019\/04\/apache-patch_v3.jpg","type":"image\/jpeg"}],"author":"Daniel G.","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Daniel G.","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.fastcomet.com\/blog\/apache-vulnerability-patching#article","isPartOf":{"@id":"https:\/\/www.fastcomet.com\/blog\/apache-vulnerability-patching"},"author":{"name":"Daniel G.","@id":"https:\/\/www.fastcomet.com\/blog\/#\/schema\/person\/206e275441cf4ae1dd16d0c63107f0a2"},"headline":"Apache Vulnerability – Crucial Patching","datePublished":"2019-04-04T13:50:23+00:00","dateModified":"2022-06-10T06:04:35+00:00","mainEntityOfPage":{"@id":"https:\/\/www.fastcomet.com\/blog\/apache-vulnerability-patching"},"wordCount":474,"commentCount":0,"image":{"@id":"https:\/\/www.fastcomet.com\/blog\/apache-vulnerability-patching#primaryimage"},"thumbnailUrl":"https:\/\/www.fastcomet.com\/blog\/wp-content\/uploads\/2019\/04\/apache-patch_v3.jpg","keywords":["apache","vulnerability"],"articleSection":["Security"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.fastcomet.com\/blog\/apache-vulnerability-patching#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.fastcomet.com\/blog\/apache-vulnerability-patching","url":"https:\/\/www.fastcomet.com\/blog\/apache-vulnerability-patching","name":"Apache Vulnerability - Crucial Patching | FastComet","isPartOf":{"@id":"https:\/\/www.fastcomet.com\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.fastcomet.com\/blog\/apache-vulnerability-patching#primaryimage"},"image":{"@id":"https:\/\/www.fastcomet.com\/blog\/apache-vulnerability-patching#primaryimage"},"thumbnailUrl":"https:\/\/www.fastcomet.com\/blog\/wp-content\/uploads\/2019\/04\/apache-patch_v3.jpg","datePublished":"2019-04-04T13:50:23+00:00","dateModified":"2022-06-10T06:04:35+00:00","author":{"@id":"https:\/\/www.fastcomet.com\/blog\/#\/schema\/person\/206e275441cf4ae1dd16d0c63107f0a2"},"description":"A new important Apache vulnerability in Apache HTTP Server software was recently discovered. ? Check our takes on this critical update.","breadcrumb":{"@id":"https:\/\/www.fastcomet.com\/blog\/apache-vulnerability-patching#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.fastcomet.com\/blog\/apache-vulnerability-patching"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.fastcomet.com\/blog\/apache-vulnerability-patching#primaryimage","url":"https:\/\/www.fastcomet.com\/blog\/wp-content\/uploads\/2019\/04\/apache-patch_v3.jpg","contentUrl":"https:\/\/www.fastcomet.com\/blog\/wp-content\/uploads\/2019\/04\/apache-patch_v3.jpg","width":1024,"height":620,"caption":"Apache Vulnerability Patch v3"},{"@type":"BreadcrumbList","@id":"https:\/\/www.fastcomet.com\/blog\/apache-vulnerability-patching#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.fastcomet.com\/blog"},{"@type":"ListItem","position":2,"name":"Apache Vulnerability – Crucial Patching"}]},{"@type":"WebSite","@id":"https:\/\/www.fastcomet.com\/blog\/#website","url":"https:\/\/www.fastcomet.com\/blog\/","name":"FastComet Blog","description":"FastComet Web Hosting Blog","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.fastcomet.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/www.fastcomet.com\/blog\/#\/schema\/person\/206e275441cf4ae1dd16d0c63107f0a2","name":"Daniel G.","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.fastcomet.com\/blog\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/80f7a08d4fd8c78380c04d41c47e6e07ac71e66c022d2fd93e32dcd8e3879e16?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/80f7a08d4fd8c78380c04d41c47e6e07ac71e66c022d2fd93e32dcd8e3879e16?s=96&d=mm&r=g","caption":"Daniel G."},"description":"Daniel works in Customer Success at FastComet. A self-described 'massive geek' and cybersecurity enthusiast, Daniel draws on his skills to research, understand, and disseminate Performance Monitoring complex topics to reach FastComet's technical audience.","sameAs":["https:\/\/www.fastcomet.com\/"],"url":"https:\/\/www.fastcomet.com\/blog\/author\/danielg"}]}},"_links":{"self":[{"href":"https:\/\/www.fastcomet.com\/blog\/wp-json\/wp\/v2\/posts\/3121","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.fastcomet.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.fastcomet.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.fastcomet.com\/blog\/wp-json\/wp\/v2\/users\/11"}],"replies":[{"embeddable":true,"href":"https:\/\/www.fastcomet.com\/blog\/wp-json\/wp\/v2\/comments?post=3121"}],"version-history":[{"count":5,"href":"https:\/\/www.fastcomet.com\/blog\/wp-json\/wp\/v2\/posts\/3121\/revisions"}],"predecessor-version":[{"id":7848,"href":"https:\/\/www.fastcomet.com\/blog\/wp-json\/wp\/v2\/posts\/3121\/revisions\/7848"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.fastcomet.com\/blog\/wp-json\/wp\/v2\/media\/2939"}],"wp:attachment":[{"href":"https:\/\/www.fastcomet.com\/blog\/wp-json\/wp\/v2\/media?parent=3121"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.fastcomet.com\/blog\/wp-json\/wp\/v2\/categories?post=3121"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.fastcomet.com\/blog\/wp-json\/wp\/v2\/tags?post=3121"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}