Search for packages
Package details: pkg:alpm/archlinux/apache@2.4.25-3
purl pkg:alpm/archlinux/apache@2.4.25-3
Next non-vulnerable version 2.4.26-1
Latest non-vulnerable version 2.4.55-1
Risk 4.4
Vulnerabilities affecting this package (5)
Vulnerability Summary Fixed by
VCID-1awx-fb64-aaae
Aliases:
CVE-2017-3167
In Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, use of the ap_get_basic_auth_pw() by third-party modules outside of the authentication phase may lead to authentication requirements being bypassed.
2.4.26-1
Affected by 0 other vulnerabilities.
VCID-46br-m32d-aaaq
Aliases:
CVE-2017-7668
The HTTP strict parsing changes added in Apache httpd 2.2.32 and 2.4.24 introduced a bug in token list parsing, which allows ap_find_token() to search past the end of its input string. By maliciously crafting a sequence of request headers, an attacker may be able to cause a segmentation fault, or to force ap_find_token() to return an incorrect value.
2.4.26-1
Affected by 0 other vulnerabilities.
VCID-g5wc-xh9z-aaaf
Aliases:
CVE-2017-7679
In Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, mod_mime can read one byte past the end of a buffer when sending a malicious Content-Type response header.
2.4.26-1
Affected by 0 other vulnerabilities.
VCID-p7u8-p1c9-aaan
Aliases:
CVE-2017-7659
A maliciously constructed HTTP/2 request could cause mod_http2 in Apache HTTP Server 2.4.24, 2.4.25 to dereference a NULL pointer and crash the server process.
2.4.26-1
Affected by 0 other vulnerabilities.
VCID-pm2k-zdhx-aaam
Aliases:
CVE-2017-3169
In Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, mod_ssl may dereference a NULL pointer when third-party modules call ap_hook_process_connection() during an HTTP request to an HTTPS port.
2.4.26-1
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2025-03-28T07:46:12.308888+00:00 Arch Linux Importer Affected by VCID-1awx-fb64-aaae https://security.archlinux.org/AVG-316 36.0.0
2025-03-28T07:46:12.288294+00:00 Arch Linux Importer Affected by VCID-pm2k-zdhx-aaam https://security.archlinux.org/AVG-316 36.0.0
2025-03-28T07:46:12.267582+00:00 Arch Linux Importer Affected by VCID-p7u8-p1c9-aaan https://security.archlinux.org/AVG-316 36.0.0
2025-03-28T07:46:12.246931+00:00 Arch Linux Importer Affected by VCID-46br-m32d-aaaq https://security.archlinux.org/AVG-316 36.0.0
2025-03-28T07:46:12.226214+00:00 Arch Linux Importer Affected by VCID-g5wc-xh9z-aaaf https://security.archlinux.org/AVG-316 36.0.0
2024-09-18T02:01:22.371739+00:00 Arch Linux Importer Affected by VCID-1awx-fb64-aaae https://security.archlinux.org/AVG-316 34.0.1
2024-09-18T02:01:22.345040+00:00 Arch Linux Importer Affected by VCID-pm2k-zdhx-aaam https://security.archlinux.org/AVG-316 34.0.1
2024-09-18T02:01:22.318461+00:00 Arch Linux Importer Affected by VCID-p7u8-p1c9-aaan https://security.archlinux.org/AVG-316 34.0.1
2024-09-18T02:01:22.281713+00:00 Arch Linux Importer Affected by VCID-46br-m32d-aaaq https://security.archlinux.org/AVG-316 34.0.1
2024-09-18T02:01:22.244278+00:00 Arch Linux Importer Affected by VCID-g5wc-xh9z-aaaf https://security.archlinux.org/AVG-316 34.0.1
2024-04-23T19:47:33.076927+00:00 Arch Linux Importer Affected by VCID-1awx-fb64-aaae https://security.archlinux.org/AVG-316 34.0.0rc4
2024-04-23T19:47:33.054334+00:00 Arch Linux Importer Affected by VCID-pm2k-zdhx-aaam https://security.archlinux.org/AVG-316 34.0.0rc4
2024-04-23T19:47:33.032391+00:00 Arch Linux Importer Affected by VCID-p7u8-p1c9-aaan https://security.archlinux.org/AVG-316 34.0.0rc4
2024-04-23T19:47:33.010184+00:00 Arch Linux Importer Affected by VCID-46br-m32d-aaaq https://security.archlinux.org/AVG-316 34.0.0rc4
2024-04-23T19:47:32.987887+00:00 Arch Linux Importer Affected by VCID-g5wc-xh9z-aaaf https://security.archlinux.org/AVG-316 34.0.0rc4
2024-01-03T22:27:32.735626+00:00 Arch Linux Importer Affected by VCID-1awx-fb64-aaae https://security.archlinux.org/AVG-316 34.0.0rc1
2024-01-03T22:27:32.714649+00:00 Arch Linux Importer Affected by VCID-pm2k-zdhx-aaam https://security.archlinux.org/AVG-316 34.0.0rc1
2024-01-03T22:27:32.693512+00:00 Arch Linux Importer Affected by VCID-p7u8-p1c9-aaan https://security.archlinux.org/AVG-316 34.0.0rc1
2024-01-03T22:27:32.672347+00:00 Arch Linux Importer Affected by VCID-46br-m32d-aaaq https://security.archlinux.org/AVG-316 34.0.0rc1
2024-01-03T22:27:32.650997+00:00 Arch Linux Importer Affected by VCID-g5wc-xh9z-aaaf https://security.archlinux.org/AVG-316 34.0.0rc1