VulnerableCode Package Details - pkg:deb/debian/apache2@2.4.59-1?distro=trixie

Search for packages

Vulnerability	Summary	Fixed by
This package is not known to be affected by vulnerabilities.

Vulnerability

Summary

Fixed by

This package is not known to be affected by vulnerabilities.

Vulnerability	Summary	Aliases
VCID-2e6w-fs4j-17g9	HTTP/2 incoming headers exceeding the limit are temporarily buffered in nghttp2 in order to generate an informative HTTP 413 response. If a client does not stop sending headers, this leads to memory exhaustion.	CVE-2024-27316
VCID-bau7-pme5-ckbt	HTTP Response splitting in multiple modules in Apache HTTP Server allows an attacker that can inject malicious response headers into backend applications to cause an HTTP desynchronization attack. Users are recommended to upgrade to version 2.4.59, which fixes this issue.	CVE-2024-24795
VCID-xhyc-9rpu-2bc8	Faulty input validation in the core of Apache allows malicious or exploitable backend/content generators to split HTTP responses. This issue affects Apache HTTP Server: through 2.4.58.	CVE-2023-38709

Vulnerability

Summary

Aliases

VCID-2e6w-fs4j-17g9

HTTP/2 incoming headers exceeding the limit are temporarily buffered in nghttp2 in order to generate an informative HTTP 413 response. If a client does not stop sending headers, this leads to memory exhaustion.

CVE-2024-27316

VCID-bau7-pme5-ckbt

HTTP Response splitting in multiple modules in Apache HTTP Server allows an attacker that can inject malicious response headers into backend applications to cause an HTTP desynchronization attack. Users are recommended to upgrade to version 2.4.59, which fixes this issue.

CVE-2024-24795

VCID-xhyc-9rpu-2bc8

Faulty input validation in the core of Apache allows malicious or exploitable backend/content generators to split HTTP responses. This issue affects Apache HTTP Server: through 2.4.58.

CVE-2023-38709

Date	Actor	Action	Vulnerability	Source	VulnerableCode Version
2026-04-13T07:45:52.528110+00:00	Debian Importer	Fixing	VCID-2e6w-fs4j-17g9	https://security-tracker.debian.org/tracker/data/json	38.3.0
2026-04-13T07:08:15.828134+00:00	Debian Importer	Fixing	VCID-bau7-pme5-ckbt	https://security-tracker.debian.org/tracker/data/json	38.3.0
2026-04-11T17:51:27.863009+00:00	Debian Importer	Fixing	VCID-xhyc-9rpu-2bc8	https://security-tracker.debian.org/tracker/data/json	38.3.0
2026-04-02T17:11:29.446503+00:00	Debian Importer	Fixing	VCID-2e6w-fs4j-17g9	https://security-tracker.debian.org/tracker/data/json	38.1.0
2026-04-02T17:08:36.749224+00:00	Debian Importer	Fixing	VCID-bau7-pme5-ckbt	https://security-tracker.debian.org/tracker/data/json	38.1.0
2026-04-02T17:02:27.352128+00:00	Debian Importer	Fixing	VCID-xhyc-9rpu-2bc8	https://security-tracker.debian.org/tracker/data/json	38.1.0