Search for packages
| purl | pkg:apache/httpd@2.4.30 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
CVE-2018-11763
|
By sending continous SETTINGS frames of maximum size an ongoing HTTP/2 connection could be kept busy and would never time … |
Vulnerable |
|
CVE-2018-17189
|
By sending request bodies in a slow loris way to plain resources, the h2 stream for that request unnecessarily occupied … |
Vulnerable |
|
CVE-2018-17199
|
In Apache HTTP Server 2.4 release 2.4.37 and prior, mod_session checks the session expiry time before decoding the session. This … |
Vulnerable |
|
CVE-2019-0196
|
Using fuzzed network input, the http/2 request handling could be made to access freed memory in string comparision when determining … |
Vulnerable |
|
CVE-2019-0211
|
In Apache HTTP Server 2.4 releases 2.4.17 to 2.4.38, with MPM event, worker or prefork, code executing in less-privileged child … |
Vulnerable |
|
CVE-2019-0217
|
In Apache HTTP Server 2.4 release 2.4.38 and prior, a race condition in mod_auth_digest when running in a threaded server … |
Vulnerable |
|
CVE-2019-0220
|
When the path component of a request URL contains multiple consecutive slashes ('/'), directives such as LocationMatch and RewriteRule must … |
Vulnerable |
|
CVE-2019-10092
|
A limited cross-site scripting issue was reported affecting the mod_proxy error page. An attacker could cause the link on the … |
Vulnerable |
|
CVE-2019-10098
|
Redirects configured with mod_rewrite that were intended to be self-referential might be fooled by encoded newlines and redirect instead to … |
Vulnerable |
|
CVE-2020-11993
|
In Apache HTTP Server versions 2.4.20 to 2.4.43, when trace/debug was enabled for the HTTP/2 module and on certain traffic … |
Not vulnerable |
|
CVE-2020-1927
|
In Apache HTTP Server versions 2.4.0 to 2.4.41 some mod_rewrite configurations vulnerable to open redirect. |
Not vulnerable |
|
CVE-2020-1934
|
in Apache HTTP Server versions 2.4.0 to 2.4.41, mod_proxy_ftp use of uninitialized value with malicious FTP backend. |
Not vulnerable |
|
CVE-2020-9490
|
In Apache HTTP Server versions 2.4.20 to 2.4.43, a specially crafted value for the 'Cache-Digest' header in a HTTP/2 request … |
Not vulnerable |
|
CVE-2021-36160
|
A carefully crafted request uri-path can cause mod_proxy_uwsgi to read above the allocated memory and crash (DoS). This issue affects … |
Vulnerable |