Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:rpm/redhat/httpd@2.2.26-41.ep6?arch=el5
purl pkg:rpm/redhat/httpd@2.2.26-41.ep6?arch=el5
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk 1.6
Vulnerabilities affecting this package (2)
Vulnerability Summary Fixed by
VCID-1d24-sy5z-jfhh
Aliases:
CVE-2013-5704
HTTP trailers could be used to replace HTTP headers late during request processing, potentially undoing or otherwise confusing modules that examined or modified request headers earlier. This fix adds the "MergeTrailers" directive to restore legacy behavior. There are no reported fixed by versions.
VCID-k4kb-21tp-4kc8
Aliases:
CVE-2015-3183
An HTTP request smuggling attack was possible due to a bug in parsing of chunked requests. A malicious client could force the server to misinterpret the request length, allowing cache poisoning or credential hijacking if an intermediary proxy is in use. There are no reported fixed by versions.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-01T14:49:44.902201+00:00 RedHat Importer Affected by VCID-1d24-sy5z-jfhh https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5704.json 38.0.0
2026-04-01T14:40:20.173401+00:00 RedHat Importer Affected by VCID-k4kb-21tp-4kc8 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3183.json 38.0.0