Search for packages
| purl | pkg:apache/httpd@2.4.53 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
CVE-2022-26377
|
Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server allows an attacker to smuggle … |
Not vulnerable |
|
CVE-2022-28330
|
Apache HTTP Server 2.4.53 and earlier on Windows may read beyond bounds when configured to process requests with the mod_isapi … |
Not vulnerable |
|
CVE-2022-28614
|
The ap_rwrite() function in Apache HTTP Server 2.4.53 and earlier may read unintended memory if an attacker can cause the … |
Not vulnerable |
|
CVE-2022-28615
|
Apache HTTP Server 2.4.53 and earlier may crash or disclose information due to a read beyond bounds in ap_strcmp_match() when … |
Not vulnerable |
|
CVE-2022-29404
|
In Apache HTTP Server 2.4.53 and earlier, a malicious request to a lua script that calls r:parsebody(0) may cause a … |
Not vulnerable |
|
CVE-2022-30522
|
If Apache HTTP Server 2.4.53 is configured to do transformations with mod_sed in contexts where the input to mod_sed may … |
Not vulnerable |
|
CVE-2022-30556
|
Apache HTTP Server 2.4.53 and earlier may return lengths to applications calling r:wsread() that point past the end of the … |
Not vulnerable |
|
CVE-2022-31813
|
Apache HTTP Server 2.4.53 and earlier may not send the X-Forwarded-* headers to the origin server based on client side … |
Not vulnerable |
| Advisory | Summary | Aliases |
|---|---|---|
|
CVE-2022-22719
|
A carefully crafted request body can cause a read to a random memory area which could cause the process to … | |
|
CVE-2022-22720
|
Apache HTTP Server 2.4.52 and earlier fails to close inbound connection when errors are encountered discarding the request body, exposing … | |
|
CVE-2022-22721
|
If LimitXMLRequestBody is set to allow request bodies larger than 350MB (defaults to 1M) on 32 bit systems an integer … | |
|
CVE-2022-23943
|
Out-of-bounds Write vulnerability in mod_sed of Apache HTTP Server allows an attacker to overwrite heap memory with possibly attacker provided … |