VulnerableCode Package Details - pkg:alpm/archlinux/apache@2.4.54-3

Search for packages

Vulnerability	Summary	Fixed by
VCID-52ed-f8tm-aaas Aliases: CVE-2006-20001	A carefully crafted If: request header can cause a memory read, or write of a single zero byte, in a pool (heap) memory location beyond the header value sent. This could cause the process to crash. This issue affects Apache HTTP Server 2.4.54 and earlier.	2.4.55-1 Affected by 0 other vulnerabilities.
VCID-58bp-xcef-aaag Aliases: CVE-2022-37436	Prior to Apache HTTP Server 2.4.55, a malicious backend can cause the response headers to be truncated early, resulting in some headers being incorporated into the response body. If the later headers have any security purpose, they will not be interpreted by the client.	2.4.55-1 Affected by 0 other vulnerabilities.
VCID-6xbz-fygf-aaaa Aliases: CVE-2022-36760	Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server allows an attacker to smuggle requests to the AJP server it forwards requests to. This issue affects Apache HTTP Server Apache HTTP Server 2.4 version 2.4.54 and prior versions.	2.4.55-1 Affected by 0 other vulnerabilities.

Vulnerability

Summary

Fixed by

VCID-52ed-f8tm-aaas
Aliases:
CVE-2006-20001

A carefully crafted If: request header can cause a memory read, or write of a single zero byte, in a pool (heap) memory location beyond the header value sent. This could cause the process to crash. This issue affects Apache HTTP Server 2.4.54 and earlier.

2.4.55-1
Affected by 0 other vulnerabilities.

VCID-58bp-xcef-aaag
Aliases:
CVE-2022-37436

Prior to Apache HTTP Server 2.4.55, a malicious backend can cause the response headers to be truncated early, resulting in some headers being incorporated into the response body. If the later headers have any security purpose, they will not be interpreted by the client.

2.4.55-1
Affected by 0 other vulnerabilities.

VCID-6xbz-fygf-aaaa
Aliases:
CVE-2022-36760

Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server allows an attacker to smuggle requests to the AJP server it forwards requests to. This issue affects Apache HTTP Server Apache HTTP Server 2.4 version 2.4.54 and prior versions.

2.4.55-1
Affected by 0 other vulnerabilities.

Vulnerability	Summary	Aliases
This package is not known to fix vulnerabilities.

Vulnerability

Summary

Aliases

This package is not known to fix vulnerabilities.

Date	Actor	Action	Vulnerability	Source	VulnerableCode Version
2025-03-28T07:44:00.740888+00:00	Arch Linux Importer	Affected by	VCID-52ed-f8tm-aaas	https://security.archlinux.org/AVG-2824	36.0.0
2025-03-28T07:44:00.711719+00:00	Arch Linux Importer	Affected by	VCID-6xbz-fygf-aaaa	https://security.archlinux.org/AVG-2824	36.0.0
2025-03-28T07:44:00.684716+00:00	Arch Linux Importer	Affected by	VCID-58bp-xcef-aaag	https://security.archlinux.org/AVG-2824	36.0.0
2024-09-18T01:59:09.079113+00:00	Arch Linux Importer	Affected by	VCID-52ed-f8tm-aaas	https://security.archlinux.org/AVG-2824	34.0.1
2024-09-18T01:59:09.057319+00:00	Arch Linux Importer	Affected by	VCID-6xbz-fygf-aaaa	https://security.archlinux.org/AVG-2824	34.0.1
2024-09-18T01:59:09.036791+00:00	Arch Linux Importer	Affected by	VCID-58bp-xcef-aaag	https://security.archlinux.org/AVG-2824	34.0.1
2024-01-03T22:25:26.991387+00:00	Arch Linux Importer	Affected by	VCID-52ed-f8tm-aaas	https://security.archlinux.org/AVG-2824	34.0.0rc1
2024-01-03T22:25:26.967312+00:00	Arch Linux Importer	Affected by	VCID-6xbz-fygf-aaaa	https://security.archlinux.org/AVG-2824	34.0.0rc1
2024-01-03T22:25:26.932359+00:00	Arch Linux Importer	Affected by	VCID-58bp-xcef-aaag	https://security.archlinux.org/AVG-2824	34.0.0rc1