Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:apache/httpd@2.4.46
purl pkg:apache/httpd@2.4.46
Next non-vulnerable version 2.4.54
Latest non-vulnerable version 2.4.54
Risk score
Vulnerabilities affecting this package (7)
Advisory Summary Fixed in package version
CVE-2019-17567

Apache HTTP Server versions 2.4.6 to 2.4.46 mod_proxy_wstunnel configured on an URL that is not necessarily Upgraded by the origin …
2.4.48
Vulnerable
CVE-2020-13938

Apache HTTP Server versions 2.4.0 to 2.4.46 Unprivileged local users can stop httpd on Windows
2.4.48
Vulnerable
CVE-2020-13950

Apache HTTP Server versions 2.4.41 to 2.4.46 mod_proxy_http can be made to crash (NULL pointer dereference) with specially crafted requests …
2.4.48
Vulnerable
CVE-2020-35452

Apache HTTP Server versions 2.4.0 to 2.4.46 A specially crafted Digest nonce can cause a stack overflow in mod_auth_digest. There …
2.4.48
Vulnerable
CVE-2021-26690

Apache HTTP Server versions 2.4.0 to 2.4.46 A specially crafted Cookie header handled by mod_session can cause a NULL pointer …
2.4.48
Vulnerable
CVE-2021-26691

Apache HTTP Server versions 2.4.0 to 2.4.46 A specially crafted SessionHeader sent by an origin server could cause a heap …
2.4.48
Vulnerable
CVE-2021-30641

Apache HTTP Server versions 2.4.39 to 2.4.46 Unexpected matching behavior with 'MergeSlashes OFF'
2.4.48
Vulnerable
This package is not known to fix any advisories.