Search for packages
| purl | pkg:apache/httpd@2.4.41 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
CVE-2019-17567
|
Apache HTTP Server versions 2.4.6 to 2.4.46 mod_proxy_wstunnel configured on an URL that is not necessarily Upgraded by the origin … |
Vulnerable |
|
CVE-2020-13938
|
Apache HTTP Server versions 2.4.0 to 2.4.46 Unprivileged local users can stop httpd on Windows |
Vulnerable |
|
CVE-2020-13950
|
Apache HTTP Server versions 2.4.41 to 2.4.46 mod_proxy_http can be made to crash (NULL pointer dereference) with specially crafted requests … |
Vulnerable |
|
CVE-2020-1927
|
In Apache HTTP Server versions 2.4.0 to 2.4.41 some mod_rewrite configurations vulnerable to open redirect. |
Not vulnerable |
|
CVE-2020-1934
|
in Apache HTTP Server versions 2.4.0 to 2.4.41, mod_proxy_ftp use of uninitialized value with malicious FTP backend. |
Not vulnerable |
|
CVE-2020-35452
|
Apache HTTP Server versions 2.4.0 to 2.4.46 A specially crafted Digest nonce can cause a stack overflow in mod_auth_digest. There … |
Vulnerable |
|
CVE-2021-26690
|
Apache HTTP Server versions 2.4.0 to 2.4.46 A specially crafted Cookie header handled by mod_session can cause a NULL pointer … |
Vulnerable |
|
CVE-2021-26691
|
Apache HTTP Server versions 2.4.0 to 2.4.46 A specially crafted SessionHeader sent by an origin server could cause a heap … |
Vulnerable |
|
CVE-2021-30641
|
Apache HTTP Server versions 2.4.39 to 2.4.46 Unexpected matching behavior with 'MergeSlashes OFF' |
Vulnerable |
| Advisory | Summary | Aliases |
|---|---|---|
|
CVE-2019-10081
|
HTTP/2 very early pushes, for example configured with "H2PushResource", could lead to an overwrite of memory in the pushing request's … | |
|
CVE-2019-10082
|
Using fuzzed network input, the http/2 session handling could be made to read memory after being freed, during connection shutdown. | |
|
CVE-2019-10092
|
A limited cross-site scripting issue was reported affecting the mod_proxy error page. An attacker could cause the link on the … | |
|
CVE-2019-10097
|
When mod_remoteip was configured to use a trusted intermediary proxy server using the "PROXY" protocol, a specially crafted PROXY header … | |
|
CVE-2019-10098
|
Redirects configured with mod_rewrite that were intended to be self-referential might be fooled by encoded newlines and redirect instead to … | |
|
CVE-2019-9517
|
A malicious client could perform a DoS attack by flooding a connection with requests and basically never reading responses on … |