Launchpad.net

CVE 2020-1934

In Apache HTTP Server 2.4.0 to 2.4.41, mod_proxy_ftp may use uninitialized memory when proxying to a malicious FTP server.

CVE-2020-1934 (Candidate) is related to these bugs:

Bug #1565744: "Mutex file:${APACHE_LOCK_DIR} default" should be disabled by default on Linux because it leads to errors

Summary				In	Importance	Status
	1565744	"Mutex file:${APACHE_LOCK_DIR} default" should be disabled by default on Linux because it leads to errors		apache2 (Ubuntu)	Undecided	Fix Released
	1565744	"Mutex file:${APACHE_LOCK_DIR} default" should be disabled by default on Linux because it leads to errors		apache2 (Ubuntu Xenial)	Low	Fix Released

Bug #1870818: apache2 security fix in 2.4.43

Summary				In	Importance	Status
	1870818	apache2 security fix in 2.4.43		apache2 (Ubuntu)	Undecided	Fix Released

See the

CVE page on Mitre.org for more details.