CVE-2018-17199 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2018-17199 Interim 1 56 2026-03-05T06:40:00Z current 2021-05-30T14:17:12Z 2026-03-05T06:40:00Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2018-17199 In Apache HTTP Server 2.4 release 2.4.37 and prior, mod_session checks the session expiry time before decoding the session. This causes session expiry time to be ignored for mod_session_cookie sessions since the expiry time is loaded when the session is decoded. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.suse.com/pipermail/sle-security-updates/2019-February/005156.html E-Mail link for SUSE-SU-2019:0498-1 https://lists.suse.com/pipermail/sle-security-updates/2019-February/005160.html E-Mail link for SUSE-SU-2019:0504-1 https://lists.suse.com/pipermail/sle-security-updates/2019-April/005302.html E-Mail link for SUSE-SU-2019:0888-1 https://lists.suse.com/pipermail/sle-security-updates/2019-April/005329.html E-Mail link for SUSE-SU-2019:0888-2 https://lists.suse.com/pipermail/sle-security-updates/2019-April/005303.html E-Mail link for SUSE-SU-2019:0889-1 https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/AROOBQ53ZDZ2TV5OILN4IH6WGBD27OJ6/#AROOBQ53ZDZ2TV5OILN4IH6WGBD27OJ6 E-Mail link for openSUSE-SU-2019:0296-1 https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/34DA5LH5SZ6A7HIAEAFTWETZONM4ZGF5/#34DA5LH5SZ6A7HIAEAFTWETZONM4ZGF5 E-Mail link for openSUSE-SU-2019:0305-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings HPE Helion OpenStack 8 SLES for SAP Applications 11 SP3 SUSE CaaS Platform 4.0 SUSE Enterprise Storage 6 SUSE Linux Enterprise Module for Server Applications 15 SP1 SUSE Liberty Linux 7 SUSE Liberty Linux 8 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE Linux Enterprise High Performance Computing 12 SP5 SUSE Linux Enterprise Module for Server Applications 15 SUSE Linux Enterprise Module for Server Applications 15 SP1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS SUSE Linux Enterprise Server 11 SP1 for Teradata SUSE Linux Enterprise Server 11 SP3 LTSS SUSE Linux Enterprise Server 11 SP3 for Teradata SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Server 11 SP4-LTSS SUSE Linux Enterprise Server 12 SP1-LTSS SUSE Linux Enterprise Server 12 SP2-BCL SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Server 12 SP3-TERADATA SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE Linux Enterprise Server 12 SP4-ESPOS SUSE Linux Enterprise Server 12 SP4-LTSS SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Software Development Kit 12 SP5 SUSE Linux Enterprise Server 12-LTSS SUSE Linux Enterprise Module for Server Applications 15 SUSE Linux Enterprise Module for Server Applications 15 SP1 SUSE Linux Enterprise Server 15 SP1-LTSS SUSE Linux Enterprise Server Teradata 12 SP3 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Server for SAP Applications 12 SP1 SUSE Linux Enterprise Server for SAP Applications 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Server for SAP Applications 12 SP4 SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE Linux Enterprise Server for SAP Applications 12 SP5 SUSE Linux Enterprise Software Development Kit 12 SP5 SUSE Linux Enterprise Module for Server Applications 15 SUSE Linux Enterprise Module for Server Applications 15 SP1 SUSE Linux Enterprise Server for SAP Applications 15 SP1 SUSE Linux Enterprise Module for Server Applications 15 SP1 SUSE Linux Enterprise Module for Server Applications 15 SP1 SUSE Linux Enterprise Module for Server Applications 15 SP1 SUSE OpenStack Cloud 8 SUSE OpenStack Cloud 9 SUSE OpenStack Cloud Crowbar 8 SUSE OpenStack Cloud Crowbar 9 SUSE Studio Onsite 1.3 openSUSE Leap 15.0 apache2 apache2-2.4.10-14.36.1 apache2-2.4.16-20.24.1 apache2-2.4.23-29.34.4 apache2-2.4.23-29.43.1 apache2-2.4.33-3.9.7 apache2-2.4.33-lp150.2.9.1 apache2-devel apache2-devel-2.4.23-29.34.4 apache2-devel-2.4.33-3.9.7 apache2-devel-2.4.33-lp150.2.9.1 apache2-doc apache2-doc-2.4.10-14.36.1 apache2-doc-2.4.16-20.24.1 apache2-doc-2.4.23-29.34.4 apache2-doc-2.4.23-29.43.1 apache2-doc-2.4.33-3.9.7 apache2-doc-2.4.33-lp150.2.9.1 apache2-event-2.4.33-lp150.2.9.1 apache2-example-pages apache2-example-pages-2.4.10-14.36.1 apache2-example-pages-2.4.16-20.24.1 apache2-example-pages-2.4.23-29.34.4 apache2-example-pages-2.4.23-29.43.1 apache2-example-pages-2.4.33-lp150.2.9.1 apache2-prefork apache2-prefork-2.4.10-14.36.1 apache2-prefork-2.4.16-20.24.1 apache2-prefork-2.4.23-29.34.4 apache2-prefork-2.4.23-29.43.1 apache2-prefork-2.4.33-3.9.7 apache2-prefork-2.4.33-lp150.2.9.1 apache2-utils apache2-utils-2.4.10-14.36.1 apache2-utils-2.4.16-20.24.1 apache2-utils-2.4.23-29.34.4 apache2-utils-2.4.23-29.43.1 apache2-utils-2.4.33-3.9.7 apache2-utils-2.4.33-lp150.2.9.1 apache2-worker apache2-worker-2.4.10-14.36.1 apache2-worker-2.4.16-20.24.1 apache2-worker-2.4.23-29.34.4 apache2-worker-2.4.23-29.43.1 apache2-worker-2.4.33-3.9.7 apache2-worker-2.4.33-lp150.2.9.1 httpd-2.4.37-39.module+el8.4.0+9658+b87b2deb httpd-2.4.6-93.el7 httpd-devel-2.4.37-39.module+el8.4.0+9658+b87b2deb httpd-devel-2.4.6-93.el7 httpd-filesystem-2.4.37-39.module+el8.4.0+9658+b87b2deb httpd-manual-2.4.37-39.module+el8.4.0+9658+b87b2deb httpd-manual-2.4.6-93.el7 httpd-tools-2.4.37-39.module+el8.4.0+9658+b87b2deb httpd-tools-2.4.6-93.el7 mod_http2-1.15.7-3.module+el8.4.0+8625+d397f3da mod_ldap-2.4.37-39.module+el8.4.0+9658+b87b2deb mod_ldap-2.4.6-93.el7 mod_md-2.0.8-8.module+el8.3.0+6814+67d1e611 mod_proxy_html-2.4.37-39.module+el8.4.0+9658+b87b2deb mod_proxy_html-2.4.6-93.el7 mod_session-2.4.37-39.module+el8.4.0+9658+b87b2deb mod_session-2.4.6-93.el7 mod_ssl-2.4.37-39.module+el8.4.0+9658+b87b2deb mod_ssl-2.4.6-93.el7 httpd-2.4.6-93.el7 as a component of SUSE Liberty Linux 7 httpd-devel-2.4.6-93.el7 as a component of SUSE Liberty Linux 7 httpd-manual-2.4.6-93.el7 as a component of SUSE Liberty Linux 7 httpd-tools-2.4.6-93.el7 as a component of SUSE Liberty Linux 7 mod_ldap-2.4.6-93.el7 as a component of SUSE Liberty Linux 7 mod_proxy_html-2.4.6-93.el7 as a component of SUSE Liberty Linux 7 mod_session-2.4.6-93.el7 as a component of SUSE Liberty Linux 7 mod_ssl-2.4.6-93.el7 as a component of SUSE Liberty Linux 7 httpd-2.4.37-39.module+el8.4.0+9658+b87b2deb as a component of SUSE Liberty Linux 8 httpd-devel-2.4.37-39.module+el8.4.0+9658+b87b2deb as a component of SUSE Liberty Linux 8 httpd-filesystem-2.4.37-39.module+el8.4.0+9658+b87b2deb as a component of SUSE Liberty Linux 8 httpd-manual-2.4.37-39.module+el8.4.0+9658+b87b2deb as a component of SUSE Liberty Linux 8 httpd-tools-2.4.37-39.module+el8.4.0+9658+b87b2deb as a component of SUSE Liberty Linux 8 mod_http2-1.15.7-3.module+el8.4.0+8625+d397f3da as a component of SUSE Liberty Linux 8 mod_ldap-2.4.37-39.module+el8.4.0+9658+b87b2deb as a component of SUSE Liberty Linux 8 mod_md-2.0.8-8.module+el8.3.0+6814+67d1e611 as a component of SUSE Liberty Linux 8 mod_proxy_html-2.4.37-39.module+el8.4.0+9658+b87b2deb as a component of SUSE Liberty Linux 8 mod_session-2.4.37-39.module+el8.4.0+9658+b87b2deb as a component of SUSE Liberty Linux 8 mod_ssl-2.4.37-39.module+el8.4.0+9658+b87b2deb as a component of SUSE Liberty Linux 8 apache2-2.4.23-29.43.1 as a component of SUSE Linux Enterprise High Performance Computing 12 SP5 apache2-doc-2.4.23-29.43.1 as a component of SUSE Linux Enterprise High Performance Computing 12 SP5 apache2-example-pages-2.4.23-29.43.1 as a component of SUSE Linux Enterprise High Performance Computing 12 SP5 apache2-prefork-2.4.23-29.43.1 as a component of SUSE Linux Enterprise High Performance Computing 12 SP5 apache2-utils-2.4.23-29.43.1 as a component of SUSE Linux Enterprise High Performance Computing 12 SP5 apache2-worker-2.4.23-29.43.1 as a component of SUSE Linux Enterprise High Performance Computing 12 SP5 apache2-2.4.33-3.9.7 as a component of SUSE Linux Enterprise Module for Server Applications 15 apache2-devel-2.4.33-3.9.7 as a component of SUSE Linux Enterprise Module for Server Applications 15 apache2-doc-2.4.33-3.9.7 as a component of SUSE Linux Enterprise Module for Server Applications 15 apache2-prefork-2.4.33-3.9.7 as a component of SUSE Linux Enterprise Module for Server Applications 15 apache2-utils-2.4.33-3.9.7 as a component of SUSE Linux Enterprise Module for Server Applications 15 apache2-worker-2.4.33-3.9.7 as a component of SUSE Linux Enterprise Module for Server Applications 15 apache2-2.4.33-3.9.7 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP1 apache2-devel-2.4.33-3.9.7 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP1 apache2-doc-2.4.33-3.9.7 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP1 apache2-prefork-2.4.33-3.9.7 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP1 apache2-utils-2.4.33-3.9.7 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP1 apache2-worker-2.4.33-3.9.7 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP1 apache2-2.4.16-20.24.1 as a component of SUSE Linux Enterprise Server 12 SP1-LTSS apache2-doc-2.4.16-20.24.1 as a component of SUSE Linux Enterprise Server 12 SP1-LTSS apache2-example-pages-2.4.16-20.24.1 as a component of SUSE Linux Enterprise Server 12 SP1-LTSS apache2-prefork-2.4.16-20.24.1 as a component of SUSE Linux Enterprise Server 12 SP1-LTSS apache2-utils-2.4.16-20.24.1 as a component of SUSE Linux Enterprise Server 12 SP1-LTSS apache2-worker-2.4.16-20.24.1 as a component of SUSE Linux Enterprise Server 12 SP1-LTSS apache2-2.4.23-29.34.4 as a component of SUSE Linux Enterprise Server 12 SP3 apache2-doc-2.4.23-29.34.4 as a component of SUSE Linux Enterprise Server 12 SP3 apache2-example-pages-2.4.23-29.34.4 as a component of SUSE Linux Enterprise Server 12 SP3 apache2-prefork-2.4.23-29.34.4 as a component of SUSE Linux Enterprise Server 12 SP3 apache2-utils-2.4.23-29.34.4 as a component of SUSE Linux Enterprise Server 12 SP3 apache2-worker-2.4.23-29.34.4 as a component of SUSE Linux Enterprise Server 12 SP3 apache2-2.4.23-29.34.4 as a component of SUSE Linux Enterprise Server 12 SP3-TERADATA apache2-doc-2.4.23-29.34.4 as a component of SUSE Linux Enterprise Server 12 SP3-TERADATA apache2-example-pages-2.4.23-29.34.4 as a component of SUSE Linux Enterprise Server 12 SP3-TERADATA apache2-prefork-2.4.23-29.34.4 as a component of SUSE Linux Enterprise Server 12 SP3-TERADATA apache2-utils-2.4.23-29.34.4 as a component of SUSE Linux Enterprise Server 12 SP3-TERADATA apache2-worker-2.4.23-29.34.4 as a component of SUSE Linux Enterprise Server 12 SP3-TERADATA apache2-2.4.23-29.34.4 as a component of SUSE Linux Enterprise Server 12 SP4 apache2-doc-2.4.23-29.34.4 as a component of SUSE Linux Enterprise Server 12 SP4 apache2-example-pages-2.4.23-29.34.4 as a component of SUSE Linux Enterprise Server 12 SP4 apache2-prefork-2.4.23-29.34.4 as a component of SUSE Linux Enterprise Server 12 SP4 apache2-utils-2.4.23-29.34.4 as a component of SUSE Linux Enterprise Server 12 SP4 apache2-worker-2.4.23-29.34.4 as a component of SUSE Linux Enterprise Server 12 SP4 apache2-2.4.23-29.43.1 as a component of SUSE Linux Enterprise Server 12 SP5 apache2-doc-2.4.23-29.43.1 as a component of SUSE Linux Enterprise Server 12 SP5 apache2-example-pages-2.4.23-29.43.1 as a component of SUSE Linux Enterprise Server 12 SP5 apache2-prefork-2.4.23-29.43.1 as a component of SUSE Linux Enterprise Server 12 SP5 apache2-utils-2.4.23-29.43.1 as a component of SUSE Linux Enterprise Server 12 SP5 apache2-worker-2.4.23-29.43.1 as a component of SUSE Linux Enterprise Server 12 SP5 apache2-2.4.10-14.36.1 as a component of SUSE Linux Enterprise Server 12-LTSS apache2-doc-2.4.10-14.36.1 as a component of SUSE Linux Enterprise Server 12-LTSS apache2-example-pages-2.4.10-14.36.1 as a component of SUSE Linux Enterprise Server 12-LTSS apache2-prefork-2.4.10-14.36.1 as a component of SUSE Linux Enterprise Server 12-LTSS apache2-utils-2.4.10-14.36.1 as a component of SUSE Linux Enterprise Server 12-LTSS apache2-worker-2.4.10-14.36.1 as a component of SUSE Linux Enterprise Server 12-LTSS apache2-2.4.16-20.24.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 apache2-doc-2.4.16-20.24.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 apache2-example-pages-2.4.16-20.24.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 apache2-prefork-2.4.16-20.24.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 apache2-utils-2.4.16-20.24.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 apache2-worker-2.4.16-20.24.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 apache2-2.4.23-29.34.4 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 apache2-doc-2.4.23-29.34.4 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 apache2-example-pages-2.4.23-29.34.4 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 apache2-prefork-2.4.23-29.34.4 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 apache2-utils-2.4.23-29.34.4 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 apache2-worker-2.4.23-29.34.4 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 apache2-2.4.23-29.34.4 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 apache2-doc-2.4.23-29.34.4 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 apache2-example-pages-2.4.23-29.34.4 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 apache2-prefork-2.4.23-29.34.4 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 apache2-utils-2.4.23-29.34.4 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 apache2-worker-2.4.23-29.34.4 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 apache2-2.4.23-29.43.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 apache2-doc-2.4.23-29.43.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 apache2-example-pages-2.4.23-29.43.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 apache2-prefork-2.4.23-29.43.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 apache2-utils-2.4.23-29.43.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 apache2-worker-2.4.23-29.43.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 apache2-devel-2.4.23-29.34.4 as a component of SUSE Linux Enterprise Software Development Kit 12 SP3 apache2-devel-2.4.23-29.34.4 as a component of SUSE Linux Enterprise Software Development Kit 12 SP4 apache2-devel-2.4.23-29.34.4 as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 apache2-2.4.33-lp150.2.9.1 as a component of openSUSE Leap 15.0 apache2-devel-2.4.33-lp150.2.9.1 as a component of openSUSE Leap 15.0 apache2-doc-2.4.33-lp150.2.9.1 as a component of openSUSE Leap 15.0 apache2-event-2.4.33-lp150.2.9.1 as a component of openSUSE Leap 15.0 apache2-example-pages-2.4.33-lp150.2.9.1 as a component of openSUSE Leap 15.0 apache2-prefork-2.4.33-lp150.2.9.1 as a component of openSUSE Leap 15.0 apache2-utils-2.4.33-lp150.2.9.1 as a component of openSUSE Leap 15.0 apache2-worker-2.4.33-lp150.2.9.1 as a component of openSUSE Leap 15.0 apache2 as a component of HPE Helion OpenStack 8 apache2-doc as a component of HPE Helion OpenStack 8 apache2-example-pages as a component of HPE Helion OpenStack 8 apache2-prefork as a component of HPE Helion OpenStack 8 apache2-utils as a component of HPE Helion OpenStack 8 apache2-worker as a component of HPE Helion OpenStack 8 apache2 as a component of SLES for SAP Applications 11 SP3 apache2 as a component of SUSE CaaS Platform 4.0 apache2-devel as a component of SUSE CaaS Platform 4.0 apache2-doc as a component of SUSE CaaS Platform 4.0 apache2-prefork as a component of SUSE CaaS Platform 4.0 apache2-utils as a component of SUSE CaaS Platform 4.0 apache2-worker as a component of SUSE CaaS Platform 4.0 apache2 as a component of SUSE Enterprise Storage 6 apache2 as a component of SUSE Linux Enterprise High Performance Computing 12 SP5 apache2 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS apache2-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS apache2-doc as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS apache2-prefork as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS apache2-utils as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS apache2-worker as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS apache2 as a component of SUSE Linux Enterprise Server 11 SP1 for Teradata apache2 as a component of SUSE Linux Enterprise Server 11 SP3 LTSS apache2 as a component of SUSE Linux Enterprise Server 11 SP3 for Teradata apache2 as a component of SUSE Linux Enterprise Server 11 SP4-LTSS apache2-doc as a component of SUSE Linux Enterprise Server 11 SP4-LTSS apache2-example-pages as a component of SUSE Linux Enterprise Server 11 SP4-LTSS apache2-prefork as a component of SUSE Linux Enterprise Server 11 SP4-LTSS apache2-utils as a component of SUSE Linux Enterprise Server 11 SP4-LTSS apache2-worker as a component of SUSE Linux Enterprise Server 11 SP4-LTSS apache2 as a component of SUSE Linux Enterprise Server 12 SP2-BCL apache2-doc as a component of SUSE Linux Enterprise Server 12 SP2-BCL apache2-example-pages as a component of SUSE Linux Enterprise Server 12 SP2-BCL apache2-prefork as a component of SUSE Linux Enterprise Server 12 SP2-BCL apache2-utils as a component of SUSE Linux Enterprise Server 12 SP2-BCL apache2-worker as a component of SUSE Linux Enterprise Server 12 SP2-BCL apache2 as a component of SUSE Linux Enterprise Server 12 SP4-ESPOS apache2-doc as a component of SUSE Linux Enterprise Server 12 SP4-ESPOS apache2-example-pages as a component of SUSE Linux Enterprise Server 12 SP4-ESPOS apache2-prefork as a component of SUSE Linux Enterprise Server 12 SP4-ESPOS apache2-utils as a component of SUSE Linux Enterprise Server 12 SP4-ESPOS apache2-worker as a component of SUSE Linux Enterprise Server 12 SP4-ESPOS apache2 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS apache2-doc as a component of SUSE Linux Enterprise Server 12 SP4-LTSS apache2-example-pages as a component of SUSE Linux Enterprise Server 12 SP4-LTSS apache2-prefork as a component of SUSE Linux Enterprise Server 12 SP4-LTSS apache2-utils as a component of SUSE Linux Enterprise Server 12 SP4-LTSS apache2-worker as a component of SUSE Linux Enterprise Server 12 SP4-LTSS apache2 as a component of SUSE Linux Enterprise Server 12 SP5 apache2-doc as a component of SUSE Linux Enterprise Server 12 SP5 apache2-example-pages as a component of SUSE Linux Enterprise Server 12 SP5 apache2-prefork as a component of SUSE Linux Enterprise Server 12 SP5 apache2-utils as a component of SUSE Linux Enterprise Server 12 SP5 apache2-worker as a component of SUSE Linux Enterprise Server 12 SP5 apache2 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS apache2-devel as a component of SUSE Linux Enterprise Server 15 SP1-LTSS apache2-doc as a component of SUSE Linux Enterprise Server 15 SP1-LTSS apache2-prefork as a component of SUSE Linux Enterprise Server 15 SP1-LTSS apache2-utils as a component of SUSE Linux Enterprise Server 15 SP1-LTSS apache2-worker as a component of SUSE Linux Enterprise Server 15 SP1-LTSS apache2 as a component of SUSE Linux Enterprise Server Teradata 12 SP3 apache2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 apache2 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 apache2-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 apache2-doc as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 apache2-prefork as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 apache2-utils as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 apache2-worker as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 apache2 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 apache2-devel as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 apache2-doc as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 apache2-example-pages as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 apache2-prefork as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 apache2-utils as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 apache2-worker as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 apache2 as a component of SUSE OpenStack Cloud 8 apache2-doc as a component of SUSE OpenStack Cloud 8 apache2-example-pages as a component of SUSE OpenStack Cloud 8 apache2-prefork as a component of SUSE OpenStack Cloud 8 apache2-utils as a component of SUSE OpenStack Cloud 8 apache2-worker as a component of SUSE OpenStack Cloud 8 apache2 as a component of SUSE OpenStack Cloud 9 apache2-doc as a component of SUSE OpenStack Cloud 9 apache2-example-pages as a component of SUSE OpenStack Cloud 9 apache2-prefork as a component of SUSE OpenStack Cloud 9 apache2-utils as a component of SUSE OpenStack Cloud 9 apache2-worker as a component of SUSE OpenStack Cloud 9 apache2 as a component of SUSE OpenStack Cloud Crowbar 8 apache2-doc as a component of SUSE OpenStack Cloud Crowbar 8 apache2-example-pages as a component of SUSE OpenStack Cloud Crowbar 8 apache2-prefork as a component of SUSE OpenStack Cloud Crowbar 8 apache2-utils as a component of SUSE OpenStack Cloud Crowbar 8 apache2-worker as a component of SUSE OpenStack Cloud Crowbar 8 apache2 as a component of SUSE OpenStack Cloud Crowbar 9 apache2-doc as a component of SUSE OpenStack Cloud Crowbar 9 apache2-example-pages as a component of SUSE OpenStack Cloud Crowbar 9 apache2-prefork as a component of SUSE OpenStack Cloud Crowbar 9 apache2-utils as a component of SUSE OpenStack Cloud Crowbar 9 apache2-worker as a component of SUSE OpenStack Cloud Crowbar 9 apache2-devel as a component of SUSE Studio Onsite 1.3 apache2 as a component of SUSE Studio Onsite 1.3 In Apache HTTP Server 2.4 release 2.4.37 and prior, mod_session checks the session expiry time before decoding the session. This causes session expiry time to be ignored for mod_session_cookie sessions since the expiry time is loaded when the session is decoded. CVE-2018-17199 SUSE Liberty Linux 7:httpd-2.4.6-93.el7 SUSE Liberty Linux 7:httpd-devel-2.4.6-93.el7 SUSE Liberty Linux 7:httpd-manual-2.4.6-93.el7 SUSE Liberty Linux 7:httpd-tools-2.4.6-93.el7 SUSE Liberty Linux 7:mod_ldap-2.4.6-93.el7 SUSE Liberty Linux 7:mod_proxy_html-2.4.6-93.el7 SUSE Liberty Linux 7:mod_session-2.4.6-93.el7 SUSE Liberty Linux 7:mod_ssl-2.4.6-93.el7 SUSE Liberty Linux 8:httpd-2.4.37-39.module+el8.4.0+9658+b87b2deb SUSE Liberty Linux 8:httpd-devel-2.4.37-39.module+el8.4.0+9658+b87b2deb SUSE Liberty Linux 8:httpd-filesystem-2.4.37-39.module+el8.4.0+9658+b87b2deb SUSE Liberty Linux 8:httpd-manual-2.4.37-39.module+el8.4.0+9658+b87b2deb SUSE Liberty Linux 8:httpd-tools-2.4.37-39.module+el8.4.0+9658+b87b2deb SUSE Liberty Linux 8:mod_http2-1.15.7-3.module+el8.4.0+8625+d397f3da SUSE Liberty Linux 8:mod_ldap-2.4.37-39.module+el8.4.0+9658+b87b2deb SUSE Liberty Linux 8:mod_md-2.0.8-8.module+el8.3.0+6814+67d1e611 SUSE Liberty Linux 8:mod_proxy_html-2.4.37-39.module+el8.4.0+9658+b87b2deb SUSE Liberty Linux 8:mod_session-2.4.37-39.module+el8.4.0+9658+b87b2deb SUSE Liberty Linux 8:mod_ssl-2.4.37-39.module+el8.4.0+9658+b87b2deb SUSE Linux Enterprise High Performance Computing 12 SP5:apache2-2.4.23-29.43.1 SUSE Linux Enterprise High Performance Computing 12 SP5:apache2-doc-2.4.23-29.43.1 SUSE Linux Enterprise High Performance Computing 12 SP5:apache2-example-pages-2.4.23-29.43.1 SUSE Linux Enterprise High Performance Computing 12 SP5:apache2-prefork-2.4.23-29.43.1 SUSE Linux Enterprise High Performance Computing 12 SP5:apache2-utils-2.4.23-29.43.1 SUSE Linux Enterprise High Performance Computing 12 SP5:apache2-worker-2.4.23-29.43.1 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP1:apache2-event-2.4.33-3.9.7 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP1:apache2-example-pages-2.4.33-3.9.7 SUSE Linux Enterprise Module for Server Applications 15:apache2-2.4.33-3.9.7 SUSE Linux Enterprise Module for Server Applications 15:apache2-devel-2.4.33-3.9.7 SUSE Linux Enterprise Module for Server Applications 15:apache2-doc-2.4.33-3.9.7 SUSE Linux Enterprise Module for Server Applications 15:apache2-prefork-2.4.33-3.9.7 SUSE Linux Enterprise Module for Server Applications 15:apache2-utils-2.4.33-3.9.7 SUSE Linux Enterprise Module for Server Applications 15:apache2-worker-2.4.33-3.9.7 SUSE Linux Enterprise Module for Server Applications 15 SP1:apache2-2.4.33-3.9.7 SUSE Linux Enterprise Module for Server Applications 15 SP1:apache2-devel-2.4.33-3.9.7 SUSE Linux Enterprise Module for Server Applications 15 SP1:apache2-doc-2.4.33-3.9.7 SUSE Linux Enterprise Module for Server Applications 15 SP1:apache2-prefork-2.4.33-3.9.7 SUSE Linux Enterprise Module for Server Applications 15 SP1:apache2-utils-2.4.33-3.9.7 SUSE Linux Enterprise Module for Server Applications 15 SP1:apache2-worker-2.4.33-3.9.7 SUSE Linux Enterprise Server 12 SP1-LTSS:apache2-2.4.16-20.24.1 SUSE Linux Enterprise Server 12 SP1-LTSS:apache2-doc-2.4.16-20.24.1 SUSE Linux Enterprise Server 12 SP1-LTSS:apache2-example-pages-2.4.16-20.24.1 SUSE Linux Enterprise Server 12 SP1-LTSS:apache2-prefork-2.4.16-20.24.1 SUSE Linux Enterprise Server 12 SP1-LTSS:apache2-utils-2.4.16-20.24.1 SUSE Linux Enterprise Server 12 SP1-LTSS:apache2-worker-2.4.16-20.24.1 SUSE Linux Enterprise Server 12 SP3:apache2-2.4.23-29.34.4 SUSE Linux Enterprise Server 12 SP3:apache2-doc-2.4.23-29.34.4 SUSE Linux Enterprise Server 12 SP3:apache2-example-pages-2.4.23-29.34.4 SUSE Linux Enterprise Server 12 SP3:apache2-prefork-2.4.23-29.34.4 SUSE Linux Enterprise Server 12 SP3:apache2-utils-2.4.23-29.34.4 SUSE Linux Enterprise Server 12 SP3:apache2-worker-2.4.23-29.34.4 SUSE Linux Enterprise Server 12 SP3-TERADATA:apache2-2.4.23-29.34.4 SUSE Linux Enterprise Server 12 SP3-TERADATA:apache2-doc-2.4.23-29.34.4 SUSE Linux Enterprise Server 12 SP3-TERADATA:apache2-example-pages-2.4.23-29.34.4 SUSE Linux Enterprise Server 12 SP3-TERADATA:apache2-prefork-2.4.23-29.34.4 SUSE Linux Enterprise Server 12 SP3-TERADATA:apache2-utils-2.4.23-29.34.4 SUSE Linux Enterprise Server 12 SP3-TERADATA:apache2-worker-2.4.23-29.34.4 SUSE Linux Enterprise Server 12 SP4:apache2-2.4.23-29.34.4 SUSE Linux Enterprise Server 12 SP4:apache2-doc-2.4.23-29.34.4 SUSE Linux Enterprise Server 12 SP4:apache2-example-pages-2.4.23-29.34.4 SUSE Linux Enterprise Server 12 SP4:apache2-prefork-2.4.23-29.34.4 SUSE Linux Enterprise Server 12 SP4:apache2-utils-2.4.23-29.34.4 SUSE Linux Enterprise Server 12 SP4:apache2-worker-2.4.23-29.34.4 SUSE Linux Enterprise Server 12 SP5:apache2-2.4.23-29.43.1 SUSE Linux Enterprise Server 12 SP5:apache2-doc-2.4.23-29.43.1 SUSE Linux Enterprise Server 12 SP5:apache2-example-pages-2.4.23-29.43.1 SUSE Linux Enterprise Server 12 SP5:apache2-prefork-2.4.23-29.43.1 SUSE Linux Enterprise Server 12 SP5:apache2-utils-2.4.23-29.43.1 SUSE Linux Enterprise Server 12 SP5:apache2-worker-2.4.23-29.43.1 SUSE Linux Enterprise Server 12-LTSS:apache2-2.4.10-14.36.1 SUSE Linux Enterprise Server 12-LTSS:apache2-doc-2.4.10-14.36.1 SUSE Linux Enterprise Server 12-LTSS:apache2-example-pages-2.4.10-14.36.1 SUSE Linux Enterprise Server 12-LTSS:apache2-prefork-2.4.10-14.36.1 SUSE Linux Enterprise Server 12-LTSS:apache2-utils-2.4.10-14.36.1 SUSE Linux Enterprise Server 12-LTSS:apache2-worker-2.4.10-14.36.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:apache2-2.4.16-20.24.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:apache2-doc-2.4.16-20.24.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:apache2-example-pages-2.4.16-20.24.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:apache2-prefork-2.4.16-20.24.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:apache2-utils-2.4.16-20.24.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:apache2-worker-2.4.16-20.24.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:apache2-2.4.23-29.34.4 SUSE Linux Enterprise Server for SAP Applications 12 SP3:apache2-doc-2.4.23-29.34.4 SUSE Linux Enterprise Server for SAP Applications 12 SP3:apache2-example-pages-2.4.23-29.34.4 SUSE Linux Enterprise Server for SAP Applications 12 SP3:apache2-prefork-2.4.23-29.34.4 SUSE Linux Enterprise Server for SAP Applications 12 SP3:apache2-utils-2.4.23-29.34.4 SUSE Linux Enterprise Server for SAP Applications 12 SP3:apache2-worker-2.4.23-29.34.4 SUSE Linux Enterprise Server for SAP Applications 12 SP4:apache2-2.4.23-29.34.4 SUSE Linux Enterprise Server for SAP Applications 12 SP4:apache2-doc-2.4.23-29.34.4 SUSE Linux Enterprise Server for SAP Applications 12 SP4:apache2-example-pages-2.4.23-29.34.4 SUSE Linux Enterprise Server for SAP Applications 12 SP4:apache2-prefork-2.4.23-29.34.4 SUSE Linux Enterprise Server for SAP Applications 12 SP4:apache2-utils-2.4.23-29.34.4 SUSE Linux Enterprise Server for SAP Applications 12 SP4:apache2-worker-2.4.23-29.34.4 SUSE Linux Enterprise Server for SAP Applications 12 SP5:apache2-2.4.23-29.43.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:apache2-doc-2.4.23-29.43.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:apache2-example-pages-2.4.23-29.43.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:apache2-prefork-2.4.23-29.43.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:apache2-utils-2.4.23-29.43.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:apache2-worker-2.4.23-29.43.1 SUSE Linux Enterprise Software Development Kit 12 SP3:apache2-devel-2.4.23-29.34.4 SUSE Linux Enterprise Software Development Kit 12 SP4:apache2-devel-2.4.23-29.34.4 SUSE Linux Enterprise Software Development Kit 12 SP5:apache2-devel-2.4.23-29.34.4 openSUSE Leap 15.0:apache2-2.4.33-lp150.2.9.1 openSUSE Leap 15.0:apache2-devel-2.4.33-lp150.2.9.1 openSUSE Leap 15.0:apache2-doc-2.4.33-lp150.2.9.1 openSUSE Leap 15.0:apache2-event-2.4.33-lp150.2.9.1 openSUSE Leap 15.0:apache2-example-pages-2.4.33-lp150.2.9.1 openSUSE Leap 15.0:apache2-prefork-2.4.33-lp150.2.9.1 openSUSE Leap 15.0:apache2-utils-2.4.33-lp150.2.9.1 openSUSE Leap 15.0:apache2-worker-2.4.33-lp150.2.9.1 SLES for SAP Applications 11 SP3:apache2 SUSE Linux Enterprise Server 11 SP1 for Teradata:apache2 SUSE Linux Enterprise Server 11 SP3 LTSS:apache2 SUSE Linux Enterprise Server 11 SP3 for Teradata:apache2 SUSE Linux Enterprise Server 11 SP4-LTSS:apache2 SUSE Linux Enterprise Server 11 SP4-LTSS:apache2-doc SUSE Linux Enterprise Server 11 SP4-LTSS:apache2-example-pages SUSE Linux Enterprise Server 11 SP4-LTSS:apache2-prefork SUSE Linux Enterprise Server 11 SP4-LTSS:apache2-utils SUSE Linux Enterprise Server 11 SP4-LTSS:apache2-worker SUSE Linux Enterprise Software Development Kit 11 SP4:apache2 SUSE Linux Enterprise Software Development Kit 11 SP4:apache2-devel SUSE Linux Enterprise Software Development Kit 11 SP4:apache2-doc SUSE Linux Enterprise Software Development Kit 11 SP4:apache2-example-pages SUSE Linux Enterprise Software Development Kit 11 SP4:apache2-prefork SUSE Linux Enterprise Software Development Kit 11 SP4:apache2-utils SUSE Linux Enterprise Software Development Kit 11 SP4:apache2-worker SUSE Studio Onsite 1.3:apache2 SUSE Studio Onsite 1.3:apache2-devel moderate 5 AV:N/AC:L/Au:N/C:N/I:P/A:N 4.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L