Search for packages
| purl | pkg:apache/httpd@2.4.48 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
CVE-2021-33193
|
A crafted method sent through HTTP/2 will bypass validation and be forwarded by mod_proxy, which can lead to request splitting … |
Vulnerable |
|
CVE-2021-34798
|
Malformed requests may cause the server to dereference a NULL pointer. This issue affects Apache HTTP Server 2.4.48 and earlier. |
Vulnerable |
|
CVE-2021-36160
|
A carefully crafted request uri-path can cause mod_proxy_uwsgi to read above the allocated memory and crash (DoS). This issue affects … |
Vulnerable |
|
CVE-2021-39275
|
ap_escape_quotes() may write beyond the end of a buffer when given malicious input. No included modules pass untrusted data to … |
Vulnerable |
|
CVE-2021-40438
|
A crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by the remote user. … |
Vulnerable |
| Advisory | Summary | Aliases |
|---|---|---|
|
CVE-2019-17567
|
Apache HTTP Server versions 2.4.6 to 2.4.46 mod_proxy_wstunnel configured on an URL that is not necessarily Upgraded by the origin … | |
|
CVE-2020-13938
|
Apache HTTP Server versions 2.4.0 to 2.4.46 Unprivileged local users can stop httpd on Windows | |
|
CVE-2020-13950
|
Apache HTTP Server versions 2.4.41 to 2.4.46 mod_proxy_http can be made to crash (NULL pointer dereference) with specially crafted requests … | |
|
CVE-2020-35452
|
Apache HTTP Server versions 2.4.0 to 2.4.46 A specially crafted Digest nonce can cause a stack overflow in mod_auth_digest. There … | |
|
CVE-2021-26690
|
Apache HTTP Server versions 2.4.0 to 2.4.46 A specially crafted Cookie header handled by mod_session can cause a NULL pointer … | |
|
CVE-2021-26691
|
Apache HTTP Server versions 2.4.0 to 2.4.46 A specially crafted SessionHeader sent by an origin server could cause a heap … | |
|
CVE-2021-30641
|
Apache HTTP Server versions 2.4.39 to 2.4.46 Unexpected matching behavior with 'MergeSlashes OFF' | |
|
CVE-2021-31618
|
Apache HTTP Server protocol handler for the HTTP/2 protocol checks received request headers against the size limitations as configured for … |