Search for packages
| purl | pkg:apache/httpd@2.2.26 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
CVE-2013-5704
|
HTTP trailers could be used to replace HTTP headers late during request processing, potentially undoing or otherwise confusing modules that … |
Vulnerable Vulnerable |
|
CVE-2013-6438
|
XML parsing code in mod_dav incorrectly calculates the end of the string when removing leading spaces and places a NUL … |
Vulnerable Vulnerable |
|
CVE-2014-0098
|
A flaw was found in mod_log_config. A remote attacker could send a specific truncated cookie causing a crash. This crash … |
Vulnerable Vulnerable |
|
CVE-2014-0118
|
A resource consumption flaw was found in mod_deflate. If request body decompression was configured (using the "DEFLATE" input filter), a … |
Vulnerable Vulnerable |
|
CVE-2014-0226
|
A race condition was found in mod_status. An attacker able to access a public server status page on a server … |
Vulnerable Vulnerable |
|
CVE-2014-0231
|
A flaw was found in mod_cgid. If a server using mod_cgid hosted CGI scripts which did not consume standard input, … |
Vulnerable Vulnerable |
|
CVE-2015-3183
|
An HTTP request smuggling attack was possible due to a bug in parsing of chunked requests. A malicious client could … |
Vulnerable Vulnerable |
|
CVE-2016-4975
|
Possible CRLF injection allowing HTTP response splitting attacks for sites which use mod_userdir. This issue was mitigated by changes made … |
Vulnerable Vulnerable |
|
CVE-2016-5387
|
HTTP_PROXY is a well-defined environment variable in a CGI process, which collided with a number of libraries which failed to … |
Vulnerable Vulnerable |
|
CVE-2016-8743
|
Apache HTTP Server, prior to release 2.4.25 (and 2.2.32), accepted a broad pattern of unusual whitespace patterns from the user-agent, … |
Vulnerable Vulnerable |
|
CVE-2017-3167
|
Use of the ap_get_basic_auth_pw() by third-party modules outside of the authentication phase may lead to authentication requirements being bypassed. Third-party … |
Vulnerable Vulnerable |
|
CVE-2017-3169
|
mod_ssl may dereference a NULL pointer when third-party modules call ap_hook_process_connection() during an HTTP request to an HTTPS port. |
Vulnerable Vulnerable |
|
CVE-2017-7679
|
mod_mime can read one byte past the end of a buffer when sending a malicious Content-Type response header. |
Vulnerable Vulnerable |
|
CVE-2017-9788
|
The value placeholder in [Proxy-]Authorization headers of type 'Digest' was not initialized or reset before or between successive key=value assignments. … |
Vulnerable Vulnerable |
|
CVE-2017-9798
|
When an unrecognized HTTP Method is given in an <Limit {method}> directive in an .htaccess file, and that .htaccess file … |
Vulnerable |