Advisories · Technology
Apache Software Foundation Apache HTTP Server.
Every CVE that names Apache Software Foundation Apache HTTP Server among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
-
Apache Software Foundation Apache HTTP Server: A specially crafted HTTP request header could have crashed the Apache HTTP Server prior…
- Apache Software Foundation Apache HTTP Server
-
Apache Software Foundation Apache HTTP Server: When an HTTP/2 stream was destroyed after being handled…
- Apache Software Foundation Apache HTTP Server
-
Apache Software Foundation Apache HTTP Server: A specially crafted request could have crashed the Apache HTTP Server prior to version…
- Apache Software Foundation Apache HTTP Server
-
Apache Software Foundation Apache HTTP Server: In Apache httpd 2.4.0 to 2.4.29, when mod_session is configured to forward its session…
- Apache Software Foundation Apache HTTP Server
-
In Apache httpd 2.4.0 to 2.4.29, the expression specified in <FilesMatch> could match '$' to a newline character in a malicious filename, rather than matching only the end of the filename.
- Apache Software Foundation Apache HTTP Server
-
In Apache httpd 2.0.23 to 2.0.65, 2.2.0 to 2.2.34, and 2.4.0 to 2.4.29, mod_authnz_ldap, if configured with AuthLDAPCharsetConfig, uses the Accept-Language header value to lookup the right charset en…
- Apache Software Foundation Apache HTTP Server
-
Apache Software Foundation Apache HTTP Server: Apache httpd allows remote attackers to read secret data from process memory if the Limit…
- Apache Software Foundation Apache HTTP Server
-
Apache Software Foundation Apache HTTP Server: Apache HTTP Server, in all releases prior to 2.2.32 and 2.4.25…
- Apache Software Foundation Apache HTTP Server
-
Apache Software Foundation Apache HTTP Server: In Apache HTTP Server versions 2.4.0 to 2.4.23…
- Apache Software Foundation Apache HTTP Server
- CWE-823
-
Apache Software Foundation Apache HTTP Server: In Apache HTTP Server versions 2.4.0 to 2.4.23…
- Apache Software Foundation Apache HTTP Server
-
Apache Software Foundation Apache HTTP Server: A maliciously constructed HTTP/2 request could cause mod_http2 in Apache HTTP Server…
- Apache Software Foundation Apache HTTP Server
-
When under stress, closing many connections, the HTTP/2 handling code in Apache httpd 2.4.26 would sometimes access memory after it has been freed, resulting in potentially erratic behaviour.
- Apache Software Foundation Apache HTTP Server
-
In Apache httpd before 2.2.34 and 2.4.x before 2.4.27, the value placeholder in [Proxy-]Authorization headers of type 'Digest' was not initialized or reset before or between successive key=value assi…
- Apache Software Foundation Apache HTTP Server
-
In Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, mod_mime can read one byte past the end of a buffer when sending a malicious Content-Type response header.
- Apache Software Foundation Apache HTTP Server
- CWE-126
-
The HTTP strict parsing changes added in Apache httpd 2.2.32 and 2.4.24 introduced a bug in token list parsing, which allows ap_find_token() to search past the end of its input string.
- Apache Software Foundation Apache HTTP Server
- CWE-126
-
NULL pointer dereference in Apache Software Foundation Apache HTTP Server
- Apache Software Foundation Apache HTTP Server
- Memory corruption
-
Improper authentication in Apache Software Foundation Apache HTTP Server
- Apache Software Foundation Apache HTTP Server
- Authentication bypass
-
Apache Software Foundation Apache HTTP Server: The mod_http2 module in the Apache HTTP Server 2.4.17 through 2.4.23…
- Apache Software Foundation Apache HTTP Server