CVE:CVE-2020-1934
CNNVD:CNNVD-202004-039
Apache HTTP Server是美国阿帕奇（Apache）基金会的一款开源网页服务器。该服务器具有快速、可靠且可通过简单的API进行扩充的特点。
Apache HTTP Server 2.4.0版本至2.4.41版本中存在安全漏洞，该漏洞源于mod_proxy_ftp使用了未初始化的内存。远程攻击者可借助特制请求利用该漏洞在系统上执行任意代码。
solution:Upgrade apache http_server to a higher version than 2.4.41,and avoid the version [2.4.0,2.4.41]; Upgrade fedoraproject fedora to a higher version than 31,32,and avoid the version 31,32; Upgrade debian debian_linux to a higher version than 9.0,10.0,and avoid the version 9.0,10.0; Upgrade canonical ubuntu_linux to a higher version than 16.04,18.04,20.04,and avoid the version 16.04,18.04,20.04; Upgrade opensuse leap to a higher version than 15.1,and avoid the version 15.1; Upgrade oracle communications_element_manager to a higher version than 8.1.1,8.2.0,8.2.1,and avoid the version 8.1.1,8.2.0,8.2.1; Upgrade oracle communications_session_report_manager to a higher version than 8.1.1,8.2.0,8.2.1,and avoid the version 8.1.1,8.2.0,8.2.1; Upgrade oracle communications_session_route_manager to a higher version than 8.1.1,8.2.0,8.2.1,and avoid the version 8.1.1,8.2.0,8.2.1; Upgrade oracle enterprise_manager_ops_center to a higher version than 12.4.0.0,and avoid the version 12.4.0.0; Upgrade oracle instantis_enterprisetrack to a higher version than 17.3,and avoid the version [17.1,17.3]; Upgrade oracle zfs_storage_appliance_kit to a higher version than 8.8,and avoid the version 8.8