Search for packages
| purl | pkg:apache/httpd@2.2.34 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
CVE-2017-9798
|
When an unrecognized HTTP Method is given in an <Limit {method}> directive in an .htaccess file, and that .htaccess file … |
Vulnerable |
| Advisory | Summary | Aliases |
|---|---|---|
|
CVE-2017-3167
|
Use of the ap_get_basic_auth_pw() by third-party modules outside of the authentication phase may lead to authentication requirements being bypassed. Third-party … | |
|
CVE-2017-3169
|
mod_ssl may dereference a NULL pointer when third-party modules call ap_hook_process_connection() during an HTTP request to an HTTPS port. | |
|
CVE-2017-7668
|
The HTTP strict parsing changes added in 2.2.32 and 2.4.24 introduced a bug in token list parsing, which allows ap_find_token() … | |
|
CVE-2017-7679
|
mod_mime can read one byte past the end of a buffer when sending a malicious Content-Type response header. | |
|
CVE-2017-9788
|
The value placeholder in [Proxy-]Authorization headers of type 'Digest' was not initialized or reset before or between successive key=value assignments. … |