Vulnerabilities affecting this package (0)
| Vulnerability |
Summary |
Fixed by |
|
This package is not known to be affected by vulnerabilities.
|
Vulnerabilities fixed by this package (4)
| Vulnerability |
Summary |
Aliases |
|
VCID-9u53-b79b-cfgd
|
Malformed requests may cause the server to dereference a NULL pointer.
This issue affects Apache HTTP Server 2.4.48 and earlier.
|
CVE-2021-34798
|
|
VCID-mtg7-8556-kbgd
|
A crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by the remote user.
This issue affects Apache HTTP Server 2.4.48 and earlier.
|
CVE-2021-40438
|
|
VCID-rdtq-8ng5-53fn
|
A carefully crafted request uri-path can cause mod_proxy_uwsgi to read above the allocated memory and crash (DoS).
This issue affects Apache HTTP Server versions 2.4.30 to 2.4.48 (inclusive).
|
CVE-2021-36160
|
|
VCID-wrw6-uzz4-rkfb
|
ap_escape_quotes() may write beyond the end of a buffer when given malicious input.
No included modules pass untrusted data to these functions, but third-party / external modules may.
This issue affects Apache HTTP Server 2.4.48 and earlier.
|
CVE-2021-39275
|