Apache漏洞CVE-2023-25690修复

漏洞描述

Apache HTTP Server 2.4.0版本至2.4.55版本存在环境问题漏洞，该漏洞源于某些mod_proxy配置允许HTTP请求走私攻击。攻击者利用该漏洞可以绕过代理服务器中的访问控制。

修复方法

升级至2.4.55版本

官方补丁

# 备份配置和数据
cp -r /etc/httpd /etc/httpd.backup
cp -r /var/www/html /var/www/html.backup
# 编译安装环境 
yum groupinstall -y "Development Tools"
yum install -y pcre pcre-devel openssl-devel expat-devel

# 下载apache
mkdir ~/apache_upgrade
cd ~/apache_upgrade
wget https://downloads.apache.org/httpd/httpd-2.4.55.tar.gz
tar -xzvf httpd-2.4.55.tar.gz

# 编译安装
cd httpd-2.4.55
./configure --with-included-apr --enable-so --enable-ssl --with-mpm=event
make
make install

# 操作
/usr/local/apache2/bin/apachectl start
/usr/local/apache2/bin/apachectl stop
/usr/local/apache2/bin/apachectl restart
/usr/local/apache2/bin/apachectl graceful