Every CVE Search/ Get API key

CVE-2026-29170

Apache HTTP Server: mod_proxy_ftp XSS

6.1 MediumFix available

A cross-site scripting vulnerability exists in mod_proxy_ftp's HTML directory list generation in Apache HTTP Server 2.4.67 and earlier when listing FTP directory contents either via forward or reverse proxy configuration.

Users are recommended to upgrade to version 2.4.68, which fixes this issue.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
Required

What an attacker can affect

Confidentiality
Low
Integrity
Low
Availability
None

Exploit likelihood

0.48%Up 0.5 points since Jun 9, 2026
90%50%10%1%

What each source reports

CVE List Score used 6.1

Apache HTTP Server: mod_proxy_ftp XSS

A cross-site scripting vulnerability exists in mod_proxy_ftp's HTML directory list generation in Apache HTTP Server 2.4.67 and earlier when listing FTP directory contents either via forward or reverse proxy configuration.

Users are recommended to upgrade to version 2.4.68, which fixes this issue.

Record
CVE-2026-29170
CVSS 3.1
6.1 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Weakness
CWE-79
Updated
2026-11-02
EUVDEUVD-2026-35087 6.1

A cross-site scripting vulnerability exists in mod_proxy_ftp's HTML directory list generation in Apache HTTP Server 2.4.67 and earlier when listing FTP directory contents either via forward or reverse proxy configuration.

Users are recommended to upgrade to version 2.4.68, which fixes this issue.

Record
EUVD-2026-35087
CVSS 3.1
6.1 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Updated
2026-11-02
GitHub AdvisoriesGHSA-9rm4-vpqg-mfpc 6.1

A cross-site scripting vulnerability exists in mod_proxy_ftp's HTML directory list generation in...

A cross-site scripting vulnerability exists in mod_proxy_ftp's HTML directory list generation in Apache HTTP Server 2.4.67 and earlier when listing FTP directory contents either via forward or reverse proxy configuration.

Users are recommended to upgrade to version 2.4.68, which fixes this issue.

Record
GHSA-9rm4-vpqg-mfpc
CVSS 3.1
6.1 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Weakness
CWE-79
Updated
2026-11-02
NVD 6.1

A cross-site scripting vulnerability exists in mod_proxy_ftp's HTML directory list generation in Apache HTTP Server 2.4.67 and earlier when listing FTP directory contents either via forward or reverse proxy configuration.

Users are recommended to upgrade to version 2.4.68, which fixes this issue.

Record
CVE-2026-29170
CVSS 3.1
6.1 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Weakness
CWE-79
Updated
2026-11-02
OSVALPINE-CVE-2026-29170 6.1

A cross-site scripting vulnerability exists in mod_proxy_ftp's HTML directory list generation in Apache HTTP Server 2.4.67 and earlier when listing FTP directory contents either via forward or reverse proxy configuration.

Users are recommended to upgrade to version 2.4.68, which fixes this issue.

Record
ALPINE-CVE-2026-29170
CVSS 3.1
6.1 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Updated
2026-11-02
OSVBELL-CVE-2026-29170 6.1
Record
BELL-CVE-2026-29170
CVSS 3.1
6.1 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Updated
2026-11-02
Show 31 moreShow less
OSV 6.1

Apache HTTP Server: mod_proxy_ftp XSS

A cross-site scripting vulnerability exists in mod_proxy_ftp's HTML directory list generation in Apache HTTP Server 2.4.67 and earlier when listing FTP directory contents either via forward or reverse proxy configuration.

Users are recommended to upgrade to version 2.4.68, which fixes this issue.

Record
CVE-2026-29170
CVSS 3.1
6.1 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Weakness
CWE-79
Updated
2026-11-05
OSVDEBIAN-CVE-2026-29170 6.1

A cross-site scripting vulnerability exists in mod_proxy_ftp's HTML directory list generation in Apache HTTP Server 2.4.67 and earlier when listing FTP directory contents either via forward or reverse proxy configuration. Users are recommended to upgrade to version 2.4.68, which fixes this issue.

Record
DEBIAN-CVE-2026-29170
CVSS 3.1
6.1 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Updated
2026-11-02
OSVOESA-2026-2744 9.8

httpd security update

Apache HTTP Server is a powerful and flexible HTTP/1.1 compliant web server.

Security Fix(es):

Use After Free vulnerability in Apache HTTP Server with mod_ldap in per-directory configuration

This issue affects Apache HTTP Server: from 2.4.0 through 2.4.67.

Users are recommended to upgrade to version 2.4.68, which fixes the issue.(CVE-2026-29167)

A cross-site scripting vulnerability exists in mod_proxy_ftp's HTML directory list generation in Apache HTTP Server 2.4.67 and earlier when listing FTP directory contents either via forward or reverse proxy configuration.

Users are recommended to upgrade to version 2.4.68, which fixes this issue.(CVE-2026-29170)

A buffer overflow in mod_proxy_html in Apache HTTP Server 2.4.67 and earlier allows an attack by an untrusted backend. Users are recommended to upgrade to version 2.4.68, which fixes this issue.(CVE-2026-34355)

Heap-based Buffer Overflow vulnerability in Apache HTTP Server with malicious backend servers and ProxyPassReverseCookie*

This issue affects Apache HTTP Server: from 2.4.0 through 2.4.67.

Users are recommended to upgrade to version 2.4.68, which fixes the issue.(CVE-2026-34356)

A path handling issue in mod_dav_fs in Apache 2.4.67 and earlier allows a WebDAV content author to directly manipulate trusted DAV property databases, potentially causing child process crashes.

Users are recommended to upgrade to version 2.4.68, which fixes this issue.(CVE-2026-42535)

Heap-based Buffer Overflow vulnerability in Apache HTTP Server with mod_xml2enc, xml2StartParse, and untrusted content

This issue affects Apache HTTP Server: from 2.4.0 through 2.4.67.

Users are recommended to upgrade to version 2.4.68, which fixes the issue.(CVE-2026-42536)

Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in the mod_proxy_ftp module in Apache HTTP Server with an attacker controlled backend FTP server.

This issue affects undefined: from 2.4.0 through 2.4.67.

Users are recommended to upgrade to version 2.4.68, which fixes the issue.(CVE-2026-44186)

Buffer Underwrite vulnerability in Apache HTTP Server on crafted regular expressions in the configuration.

This issue affects Apache HTTP Server: from 2.4.0 through 2.4.67.

Users are recommended to upgrade to version 2.4.68, which fixes the issue.(CVE-2026-44631)

Record
OESA-2026-2744
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2026-2745 9.8

httpd security update

Apache HTTP Server is a powerful and flexible HTTP/1.1 compliant web server.

Security Fix(es):

Use After Free vulnerability in Apache HTTP Server with mod_ldap in per-directory configuration

This issue affects Apache HTTP Server: from 2.4.0 through 2.4.67.

Users are recommended to upgrade to version 2.4.68, which fixes the issue.(CVE-2026-29167)

A cross-site scripting vulnerability exists in mod_proxy_ftp's HTML directory list generation in Apache HTTP Server 2.4.67 and earlier when listing FTP directory contents either via forward or reverse proxy configuration.

Users are recommended to upgrade to version 2.4.68, which fixes this issue.(CVE-2026-29170)

A buffer overflow in mod_proxy_html in Apache HTTP Server 2.4.67 and earlier allows an attack by an untrusted backend. Users are recommended to upgrade to version 2.4.68, which fixes this issue.(CVE-2026-34355)

Heap-based Buffer Overflow vulnerability in Apache HTTP Server with malicious backend servers and ProxyPassReverseCookie*

This issue affects Apache HTTP Server: from 2.4.0 through 2.4.67.

Users are recommended to upgrade to version 2.4.68, which fixes the issue.(CVE-2026-34356)

A path handling issue in mod_dav_fs in Apache 2.4.67 and earlier allows a WebDAV content author to directly manipulate trusted DAV property databases, potentially causing child process crashes.

Users are recommended to upgrade to version 2.4.68, which fixes this issue.(CVE-2026-42535)

Heap-based Buffer Overflow vulnerability in Apache HTTP Server with mod_xml2enc, xml2StartParse, and untrusted content

This issue affects Apache HTTP Server: from 2.4.0 through 2.4.67.

Users are recommended to upgrade to version 2.4.68, which fixes the issue.(CVE-2026-42536)

Improper Privilege Management vulnerability in Apache HTTP Server 2.4.67 and earlier allows local .htaccess authors to read files with the privileges of the httpd user.

This issue affects Apache HTTP Server: from through 2.4.67.

Users are recommended to upgrade to version 2.4.68, which fixes the issue.(CVE-2026-44119)

Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in the mod_proxy_ftp module in Apache HTTP Server with an attacker controlled backend FTP server.

This issue affects undefined: from 2.4.0 through 2.4.67.

Users are recommended to upgrade to version 2.4.68, which fixes the issue.(CVE-2026-44186)

Buffer Underwrite vulnerability in Apache HTTP Server on crafted regular expressions in the configuration.

This issue affects Apache HTTP Server: from 2.4.0 through 2.4.67.

Users are recommended to upgrade to version 2.4.68, which fixes the issue.(CVE-2026-44631)

Record
OESA-2026-2745
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2026-2746 9.8

httpd security update

Apache HTTP Server is a powerful and flexible HTTP/1.1 compliant web server.

Security Fix(es):

Use After Free vulnerability in Apache HTTP Server with mod_ldap in per-directory configuration

This issue affects Apache HTTP Server: from 2.4.0 through 2.4.67.

Users are recommended to upgrade to version 2.4.68, which fixes the issue.(CVE-2026-29167)

A cross-site scripting vulnerability exists in mod_proxy_ftp's HTML directory list generation in Apache HTTP Server 2.4.67 and earlier when listing FTP directory contents either via forward or reverse proxy configuration.

Users are recommended to upgrade to version 2.4.68, which fixes this issue.(CVE-2026-29170)

A buffer overflow in mod_proxy_html in Apache HTTP Server 2.4.67 and earlier allows an attack by an untrusted backend. Users are recommended to upgrade to version 2.4.68, which fixes this issue.(CVE-2026-34355)

Heap-based Buffer Overflow vulnerability in Apache HTTP Server with malicious backend servers and ProxyPassReverseCookie*

This issue affects Apache HTTP Server: from 2.4.0 through 2.4.67.

Users are recommended to upgrade to version 2.4.68, which fixes the issue.(CVE-2026-34356)

A path handling issue in mod_dav_fs in Apache 2.4.67 and earlier allows a WebDAV content author to directly manipulate trusted DAV property databases, potentially causing child process crashes.

Users are recommended to upgrade to version 2.4.68, which fixes this issue.(CVE-2026-42535)

Heap-based Buffer Overflow vulnerability in Apache HTTP Server with mod_xml2enc, xml2StartParse, and untrusted content

This issue affects Apache HTTP Server: from 2.4.0 through 2.4.67.

Users are recommended to upgrade to version 2.4.68, which fixes the issue.(CVE-2026-42536)

Out-of-bounds Read vulnerability in Apache HTTP Server with mod_headers and mod_mime and multiple response languages.

This issue affects Apache HTTP Server: from 2.4.0 through 2.4.67.(CVE-2026-43951)

Improper Privilege Management vulnerability in Apache HTTP Server 2.4.67 and earlier allows local .htaccess authors to read files with the privileges of the httpd user.

This issue affects Apache HTTP Server: from through 2.4.67.

Users are recommended to upgrade to version 2.4.68, which fixes the issue.(CVE-2026-44119)

Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in the mod_proxy_ftp module in Apache HTTP Server with an attacker controlled backend FTP server.

This issue affects undefined: from 2.4.0 through 2.4.67.

Users are recommended to upgrade to version 2.4.68, which fixes the issue.(CVE-2026-44186)

Buffer Underwrite vulnerability in Apache HTTP Server on crafted regular expressions in the configuration.

This issue affects Apache HTTP Server: from 2.4.0 through 2.4.67.

Users are recommended to upgrade to version 2.4.68, which fixes the issue.(CVE-2026-44631)

Use After Free vulnerability in Apache HTTP Server module mod_http2 when file handles are already exhausted.

This issue affects Apache HTTP Server: from 2.4.55 through 2.4.67.(CVE-2026-48913)

Record
OESA-2026-2746
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2026-2747 9.8

httpd security update

Apache HTTP Server is a powerful and flexible HTTP/1.1 compliant web server.

Security Fix(es):

Use After Free vulnerability in Apache HTTP Server with mod_ldap in per-directory configuration

This issue affects Apache HTTP Server: from 2.4.0 through 2.4.67.

Users are recommended to upgrade to version 2.4.68, which fixes the issue.(CVE-2026-29167)

A cross-site scripting vulnerability exists in mod_proxy_ftp's HTML directory list generation in Apache HTTP Server 2.4.67 and earlier when listing FTP directory contents either via forward or reverse proxy configuration.

Users are recommended to upgrade to version 2.4.68, which fixes this issue.(CVE-2026-29170)

A buffer overflow in mod_proxy_html in Apache HTTP Server 2.4.67 and earlier allows an attack by an untrusted backend. Users are recommended to upgrade to version 2.4.68, which fixes this issue.(CVE-2026-34355)

Heap-based Buffer Overflow vulnerability in Apache HTTP Server with malicious backend servers and ProxyPassReverseCookie*

This issue affects Apache HTTP Server: from 2.4.0 through 2.4.67.

Users are recommended to upgrade to version 2.4.68, which fixes the issue.(CVE-2026-34356)

A path handling issue in mod_dav_fs in Apache 2.4.67 and earlier allows a WebDAV content author to directly manipulate trusted DAV property databases, potentially causing child process crashes.

Users are recommended to upgrade to version 2.4.68, which fixes this issue.(CVE-2026-42535)

Heap-based Buffer Overflow vulnerability in Apache HTTP Server with mod_xml2enc, xml2StartParse, and untrusted content

This issue affects Apache HTTP Server: from 2.4.0 through 2.4.67.

Users are recommended to upgrade to version 2.4.68, which fixes the issue.(CVE-2026-42536)

Out-of-bounds Read vulnerability in Apache HTTP Server with mod_headers and mod_mime and multiple response languages.

This issue affects Apache HTTP Server: from 2.4.0 through 2.4.67.(CVE-2026-43951)

Improper Privilege Management vulnerability in Apache HTTP Server 2.4.67 and earlier allows local .htaccess authors to read files with the privileges of the httpd user.

This issue affects Apache HTTP Server: from through 2.4.67.

Users are recommended to upgrade to version 2.4.68, which fixes the issue.(CVE-2026-44119)

Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in the mod_proxy_ftp module in Apache HTTP Server with an attacker controlled backend FTP server.

This issue affects undefined: from 2.4.0 through 2.4.67.

Users are recommended to upgrade to version 2.4.68, which fixes the issue.(CVE-2026-44186)

Buffer Underwrite vulnerability in Apache HTTP Server on crafted regular expressions in the configuration.

This issue affects Apache HTTP Server: from 2.4.0 through 2.4.67.

Users are recommended to upgrade to version 2.4.68, which fixes the issue.(CVE-2026-44631)

Use After Free vulnerability in Apache HTTP Server module mod_http2 when file handles are already exhausted.

This issue affects Apache HTTP Server: from 2.4.55 through 2.4.67.(CVE-2026-48913)

Record
OESA-2026-2747
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:25042 7.7

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Record
RHSA-2026:25042
CVSS 3.1
7.7 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:56868 7.7

Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.62 SP5 security update

Record
RHSA-2026:56868
CVSS 3.1
7.7 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2026-29170 6.1

A cross-site scripting vulnerability exists in mod_proxy_ftp's HTML directory list generation in Apache HTTP Server 2.4.67 and earlier when listing FTP directory contents either via forward or reverse proxy configuration. Users are recommended to upgrade to version 2.4.68, which fixes this issue.

Record
UBUNTU-CVE-2026-29170
CVSS 3.1
6.1 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Updated
2026-11-02
OSVAZL-89723 No score

CVE-2026-29170 affecting package httpd for versions less than 2.4.68-1

A cross-site scripting vulnerability exists in mod_proxy_ftp's HTML directory list generation in Apache HTTP Server 2.4.67 and earlier when listing FTP directory contents either via forward or reverse proxy configuration.

Users are recommended to upgrade to version 2.4.68, which fixes this issue.

Record
AZL-89723
Updated
2026-11-02
OSVBIT-apache-2026-29170 No score

Apache HTTP Server: mod_proxy_ftp XSS

A cross-site scripting vulnerability exists in mod_proxy_ftp's HTML directory list generation in Apache HTTP Server 2.4.67 and earlier when listing FTP directory contents either via forward or reverse proxy configuration.

Users are recommended to upgrade to version 2.4.68, which fixes this issue.

Record
BIT-apache-2026-29170
Updated
2026-11-02
OSVCLSA-2026-1781194173 No score

httpd: Fix of 6 CVEs

  • CVE-2026-29167: fix mod_ldap use-after-free with per-directory LDAP config
  • CVE-2026-29170: fix mod_proxy_ftp XSS in generated FTP directory listings
  • CVE-2026-34355: fix mod_proxy_html buffer overflow via ap_varbuf API migration
  • CVE-2026-34356: fix mod_proxy heap buffer overflow in ProxyPassReverseCookie* handling
  • CVE-2026-42535: fix mod_dav_fs path handling allowing manipulation of DAV property databases
  • CVE-2026-42536: fix mod_xml2enc heap buffer overflow in xml2StartParse accounting
Record
CLSA-2026-1781194173
Updated
2026-11-02
OSVCLSA-2026-1781209763 No score

httpd: Fix of 6 CVEs

  • CVE-2026-29167: fix mod_ldap use-after-free with per-directory LDAP config
  • CVE-2026-29170: fix mod_proxy_ftp XSS in generated FTP directory listings
  • CVE-2026-34355: fix mod_proxy_html buffer overflow via ap_varbuf API migration
  • CVE-2026-34356: fix mod_proxy heap buffer overflow in ProxyPassReverseCookie* handling
  • CVE-2026-42535: fix mod_dav_fs path handling allowing manipulation of DAV property databases
  • CVE-2026-42536: fix mod_xml2enc heap buffer overflow in xml2StartParse accounting
Record
CLSA-2026-1781209763
Updated
2026-11-02
OSVCLSA-2026-1781210149 No score

httpd: Fix of 6 CVEs

  • CVE-2026-29167: fix mod_ldap use-after-free with per-directory LDAP config
  • CVE-2026-29170: fix mod_proxy_ftp XSS in generated FTP directory listings
  • CVE-2026-34355: fix mod_proxy_html buffer overflow via ap_varbuf API migration
  • CVE-2026-34356: fix mod_proxy heap buffer overflow in ProxyPassReverseCookie* handling
  • CVE-2026-42535: fix mod_dav_fs path handling allowing manipulation of DAV property databases
  • CVE-2026-42536: fix mod_xml2enc heap buffer overflow in xml2StartParse accounting
Record
CLSA-2026-1781210149
Updated
2026-11-02
OSVCLSA-2026-1781255857 No score

httpd: Fix of 3 CVEs

  • CVE-2026-34356: mod_proxy: honor only last cookie path/domain
  • CVE-2026-29170: mod_proxy_ftp: escape filenames in dir listing
  • CVE-2026-34355: mod_proxy_html: use ap_varbuf to fix overflow
Record
CLSA-2026-1781255857
Updated
2026-11-02
OSVCLSA-2026-1781622427 No score

httpd: Fix of 5 CVEs

  • CVE-2026-29167: mod_ldap: use-after-free in per-directory configuration — deep-copy the client certificate list (and referenced path/password strings) into the connection pool instead of a shallow header copy
  • CVE-2026-29170: mod_proxy_ftp: cross-site scripting in the generated FTP directory listing — escape href filenames with ap_os_escape_path() wrapped in ap_escape_html() instead of ap_escape_uri()
  • CVE-2026-34355: mod_proxy_html: heap buffer overflow reachable from an untrusted backend — replace hand-rolled buffer management with the ap_varbuf API
  • CVE-2026-42535: mod_dav_fs: deny WebDAV access to/within the .DAV state directory in dav_fs_get_resource()
  • CVE-2026-42536: mod_xml2enc: heap buffer overflow in fix_skipto — keep the buffer length (bblen) accounting in sync when advancing the buffer
Record
CLSA-2026-1781622427
Updated
2026-11-02
OSVCLSA-2026-1781623309 No score

httpd: Fix of 2 CVEs

  • CVE-2026-29170: mod_proxy_ftp: XSS in generated HTML directory listing; escape entry names with ap_escape_html(ap_os_escape_path()) instead of ap_escape_uri() in href attributes
  • CVE-2026-42535: mod_dav_fs: deny WebDAV access to or within the DAV_FS_STATE_DIR state directory to prevent manipulation of trusted property databases
Record
CLSA-2026-1781623309
Updated
2026-11-02
OSVCLSA-2026-1781623818 No score

httpd: Fix of 3 CVEs

  • CVE-2026-29170: mod_proxy_ftp: XSS in generated HTML directory listing; escape entry names with ap_escape_html(ap_os_escape_path()) instead of ap_escape_uri() in href attributes
  • CVE-2026-42535: mod_dav_fs: deny WebDAV access to or within the DAV_FS_STATE_DIR state directory to prevent manipulation of trusted property databases
Record
CLSA-2026-1781623818
Updated
2026-11-02
OSVCLSA-2026-1781627270 No score

httpd: Fix of 5 CVEs

  • CVE-2026-29167: mod_ldap: use-after-free in per-directory configuration — deep-copy the client certificate list (and referenced path/password strings) into the connection pool instead of a shallow header copy
  • CVE-2026-29170: mod_proxy_ftp: cross-site scripting in the generated FTP directory listing — escape href filenames with ap_os_escape_path() wrapped in ap_escape_html() instead of ap_escape_uri()
  • CVE-2026-34355: mod_proxy_html: heap buffer overflow reachable from an untrusted backend — replace hand-rolled buffer management with the ap_varbuf API
  • CVE-2026-42535: mod_dav_fs: deny WebDAV access to/within the .DAV state directory in dav_fs_get_resource()
  • CVE-2026-42536: mod_xml2enc: heap buffer overflow in fix_skipto — keep the buffer length (bblen) accounting in sync when advancing the buffer
Record
CLSA-2026-1781627270
Updated
2026-11-02
OSVCLSA-2026-1782141694 No score

Fix of 5 CVEs

  • SECURITY UPDATE: mod_xml2enc heap-based buffer overflow via xml2StartParse with untrusted content
    • debian/patches/CVE-2026-42536.patch: mod_xml2enc heap-based buffer overflow via xml2StartParse with untrusted content
    • CVE-2026-42536
  • SECURITY UPDATE: mod_proxy_ftp cross-site scripting in HTML directory list generation
    • debian/patches/CVE-2026-29170.patch: mod_proxy_ftp cross-site scripting in HTML directory list generation
    • CVE-2026-29170
  • SECURITY UPDATE: mod_ldap use-after-free in per-directory configuration
    • debian/patches/CVE-2026-29167.patch: mod_ldap use-after-free in per-directory configuration
    • CVE-2026-29167
  • SECURITY UPDATE: mod_dav_fs path handling allows direct manipulation of trusted DAV property databases
    • debian/patches/CVE-2026-42535.patch: mod_dav_fs path handling allows direct manipulation of trusted DAV property databases
    • CVE-2026-42535
  • SECURITY UPDATE: mod_proxy_html buffer overflow allowing attack by an untrusted backend
    • debian/patches/CVE-2026-34355.patch: mod_proxy_html buffer overflow allowing attack by an untrusted backend
    • CVE-2026-34355
Record
CLSA-2026-1782141694
Updated
2026-11-02
OSVCLSA-2026-1782295363 No score

Fix of 5 CVEs

  • SECURITY UPDATE: mod_xml2enc heap-based buffer overflow via xml2StartParse with untrusted content
    • debian/patches/CVE-2026-42536.patch: mod_xml2enc heap-based buffer overflow via xml2StartParse with untrusted content
    • CVE-2026-42536
  • SECURITY UPDATE: mod_proxy_ftp cross-site scripting in HTML directory list generation
    • debian/patches/CVE-2026-29170.patch: mod_proxy_ftp cross-site scripting in HTML directory list generation
    • CVE-2026-29170
  • SECURITY UPDATE: mod_ldap use-after-free in per-directory configuration
    • debian/patches/CVE-2026-29167.patch: mod_ldap use-after-free in per-directory configuration
    • CVE-2026-29167
  • SECURITY UPDATE: mod_dav_fs path handling allows direct manipulation of trusted DAV property databases
    • debian/patches/CVE-2026-42535.patch: mod_dav_fs path handling allows direct manipulation of trusted DAV property databases
    • CVE-2026-42535
  • SECURITY UPDATE: mod_proxy_html buffer overflow allowing attack by an untrusted backend
    • debian/patches/CVE-2026-34355.patch: mod_proxy_html buffer overflow allowing attack by an untrusted backend
    • CVE-2026-34355
Record
CLSA-2026-1782295363
Updated
2026-11-02
OSVMGASA-2026-0289 No score

Updated apache packages fix security vulnerabilities

The updated packages fix security vulnerabilities: Apache HTTP Server: mod_ldap per-dir use-after-free. (CVE-2026-29167) Apache HTTP Server: mod_proxy_ftp XSS. (CVE-2026-29170) Apache HTTP Server: mod_proxy_html buffer overflow. (CVE-2026-34355) Apache HTTP Server: ProxyPassReverseCookieMap buffer overflow. (CVE-2026-34356) Apache HTTP Server: mod_dav_fs protected directory access. (CVE-2026-42535) Apache HTTP Server: mod_xml2enc heap overflow. (CVE-2026-42536) Apache HTTP Server: OOB Read in merge_response_headers can cause crash. (CVE-2026-43951) Apache HTTP Server: escalation of privilege through expressions in .htaccess in multiple modules. (CVE-2026-44119) Apache HTTP Server: Stack Buffer Over-Read in mod_ssl OCSP send_request. (CVE-2026-44185) Apache HTTP Server: Loop in proxy_ftp_handler in mod_proxy_ftp. (CVE-2026-44186) Apache HTTP Server: Heap Underflow in ap_regname via Signed Char Overflow. (CVE-2026-44631) Apache HTTP Server: mod_http2 memory corruption when file handles exhausted. (CVE-2026-48913) Apache HTTP Server: mod_http2 denial of service. (CVE-2026-49975)

Record
MGASA-2026-0289
Updated
2026-11-02
OSVopenSUSE-SU-2026:21235-1 No score

Security update for apache2

This update for apache2 fixes the following issues

  • CVE-2026-29167: mod_ldap per-dir use-after-free (bsc#1267976).
  • CVE-2026-29170: mod_proxy_ftp XSS (bsc#1267977).
  • CVE-2026-34355: mod_proxy_html buffer overflow (bsc#1267978).
  • CVE-2026-34356: malicious backend servers can lead to a heap-based buffer overflow (bsc#1267955).
  • CVE-2026-42535: malicious path manipulation can lead to child process crashes (bsc#1267956).
  • CVE-2026-42536: processing untrusted content can lead to a heap-based buffer overflow (bsc#1267962).
  • CVE-2026-43951: out-of-bound read in merge_response_headers can cause crash (bsc#1267963).
  • CVE-2026-44119: improper privilege management can lead to an unauthorized read (bsc#1267965).
  • CVE-2026-44185: Stack Buffer Over-Read in mod_ssl OCSP send_request (bsc#1267969).
  • CVE-2026-44186: responses from an attacker-controlled FTP backend can lead to resource exhaustion and a denial of service (bsc#1267970).
  • CVE-2026-44631: crafted regular expression can lead to a buffer underwrite (bsc#1267971).
  • CVE-2026-48913: file handle exhaustion during request processing in mod_http2 can lead to a use-after-free (bsc#1267972).
  • CVE-2026-49975: Fix cookie header accounting against LimitRequestFields (bsc#1267503).
Record
openSUSE-SU-2026:21235-1
Updated
2026-11-02
OSVROOT-OS-DEBIAN-13-CVE-2026-29170 No score

CVE-2026-29170 in apache2 - Patched by Root

Root has patched CVE-2026-29170 in the apache2 package for Root:Debian:13. Multiple fixed versions available.

Record
ROOT-OS-DEBIAN-13-CVE-2026-29170
Updated
2026-11-02
OSVSUSE-SU-2026:22564-1 No score

Security update for apache2

This update for apache2 fixes the following issues

  • CVE-2026-29167: mod_ldap per-dir use-after-free (bsc#1267976).
  • CVE-2026-29170: mod_proxy_ftp XSS (bsc#1267977).
  • CVE-2026-34355: mod_proxy_html buffer overflow (bsc#1267978).
  • CVE-2026-34356: malicious backend servers can lead to a heap-based buffer overflow (bsc#1267955).
  • CVE-2026-42535: malicious path manipulation can lead to child process crashes (bsc#1267956).
  • CVE-2026-42536: processing untrusted content can lead to a heap-based buffer overflow (bsc#1267962).
  • CVE-2026-43951: out-of-bound read in merge_response_headers can cause crash (bsc#1267963).
  • CVE-2026-44119: improper privilege management can lead to an unauthorized read (bsc#1267965).
  • CVE-2026-44185: Stack Buffer Over-Read in mod_ssl OCSP send_request (bsc#1267969).
  • CVE-2026-44186: responses from an attacker-controlled FTP backend can lead to resource exhaustion and a denial of service (bsc#1267970).
  • CVE-2026-44631: crafted regular expression can lead to a buffer underwrite (bsc#1267971).
  • CVE-2026-48913: file handle exhaustion during request processing in mod_http2 can lead to a use-after-free (bsc#1267972).
  • CVE-2026-49975: Fix cookie header accounting against LimitRequestFields (bsc#1267503).
Record
SUSE-SU-2026:22564-1
Updated
2026-11-02
OSVSUSE-SU-2026:2686-1 No score

Security update for apache2

This update for apache2 fixes the following issues

  • CVE-2026-23918: http2: double free and possible RCE on early reset (bsc#1263957).
  • CVE-2026-24072: mod_rewrite elevation of privileges via ap_expr (bsc#1263935).
  • CVE-2026-28780: heap buffer overflow in mod_proxy_ajp via ajp_msg_check_header() (bsc#1264163).
  • CVE-2026-29167: mod_ldap per-dir use-after-free (bsc#1267976).
  • CVE-2026-29168: allocation of resources without limits in mod_md via OCSP response (bsc#1264150).
  • CVE-2026-29169: NULL pointer dereference in mod_dav_lock allows server crash via malicious requests (bsc#1263956).
  • CVE-2026-29170: mod_proxy_ftp XSS (bsc#1267977).
  • CVE-2026-33006: mod_auth_digest timing attack allows bypass of Digest authentication (bsc#1263955).
  • CVE-2026-33007: NULL pointer dereference in mod_authn_socache allows unauthenticated remote user to crash a child processes (bsc#1263954).
  • CVE-2026-33523: HTTP response splitting forwarding malicious status line (bsc#1263953).
  • CVE-2026-33857: off-by-one OOB reads in AJP getter functions (bsc#1263952).
  • CVE-2026-34032: heap buffer overread in mod_proxy_ajp due to missing null-termination check (bsc#1263951).
  • CVE-2026-34059: heap buffer overread and memory disclosure via ajp_parse_data() (bsc#1263950).
  • CVE-2026-34355: mod_proxy_html buffer overflow (bsc#1267978).
  • CVE-2026-34356: malicious backend servers can lead to a heap-based buffer overflow (bsc#1267955).
  • CVE-2026-42535: malicious path manipulation can lead to child process crashes (bsc#1267956).
  • CVE-2026-42536: processing untrusted content can lead to a heap-based buffer overflow (bsc#1267962).
  • CVE-2026-43951: out-of-bound read in merge_response_headers can cause crash (bsc#1267963).
  • CVE-2026-44119: improper privilege management can lead to an unauthorized read (bsc#1267965).
  • CVE-2026-44185: Stack Buffer Over-Read in mod_ssl OCSP send_request (bsc#1267969).
  • CVE-2026-44186: responses from an attacker-controlled FTP backend can lead to resource exhaustion and a denial of service (bsc#1267970).
  • CVE-2026-44631: crafted regular expression can lead to a buffer underwrite (bsc#1267971).
  • CVE-2026-48913: file handle exhaustion during request processing in mod_http2 can lead to a use-after-free (bsc#1267972).
  • CVE-2026-49975: Fix cookie header accounting against LimitRequestFields (bsc#1267503).

Non security issue:

  • Update to 2.4.66 (jsc#PED-16334).
Record
SUSE-SU-2026:2686-1
Updated
2026-11-02
OSVSUSE-SU-2026:2717-1 No score

Security update for apache2

This update for apache2 fixes the following issues

  • CVE-2026-29167: mod_ldap per-dir use-after-free (bsc#1267976).
  • CVE-2026-29170: mod_proxy_ftp XSS (bsc#1267977).
  • CVE-2026-34355: mod_proxy_html buffer overflow (bsc#1267978).
  • CVE-2026-34356: malicious backend servers can lead to a heap-based buffer overflow (bsc#1267955).
  • CVE-2026-42535: malicious path manipulation can lead to child process crashes (bsc#1267956).
  • CVE-2026-42536: processing untrusted content can lead to a heap-based buffer overflow (bsc#1267962).
  • CVE-2026-43951: out-of-bound read in merge_response_headers can cause crash (bsc#1267963).
  • CVE-2026-44119: improper privilege management can lead to an unauthorized read (bsc#1267965).
  • CVE-2026-44185: Stack Buffer Over-Read in mod_ssl OCSP send_request (bsc#1267969).
  • CVE-2026-44186: responses from an attacker-controlled FTP backend can lead to resource exhaustion and a denial of service (bsc#1267970).
  • CVE-2026-44631: crafted regular expression can lead to a buffer underwrite (bsc#1267971).
  • CVE-2026-48913: file handle exhaustion during request processing in mod_http2 can lead to a use-after-free (bsc#1267972).
  • CVE-2026-49975: Fix cookie header accounting against LimitRequestFields (bsc#1267503).
Record
SUSE-SU-2026:2717-1
Updated
2026-11-02
OSVSUSE-SU-2026:2735-1 No score

Security update for apache2

This update for apache2 fixes the following issues

  • CVE-2026-29167: mod_ldap per-dir use-after-free (bsc#1267976).
  • CVE-2026-29170: mod_proxy_ftp XSS (bsc#1267977).
  • CVE-2026-34355: mod_proxy_html buffer overflow (bsc#1267978).
  • CVE-2026-34356: malicious backend servers can lead to a heap-based buffer overflow (bsc#1267955).
  • CVE-2026-42535: malicious path manipulation can lead to child process crashes (bsc#1267956).
  • CVE-2026-42536: processing untrusted content can lead to a heap-based buffer overflow (bsc#1267962).
  • CVE-2026-43951: out-of-bound read in merge_response_headers can cause crash (bsc#1267963).
  • CVE-2026-44119: improper privilege management can lead to an unauthorized read (bsc#1267965).
  • CVE-2026-44185: Stack Buffer Over-Read in mod_ssl OCSP send_request (bsc#1267969).
  • CVE-2026-44186: responses from an attacker-controlled FTP backend can lead to resource exhaustion and a denial of service (bsc#1267970).
  • CVE-2026-44631: crafted regular expression can lead to a buffer underwrite (bsc#1267971).
  • CVE-2026-48913: file handle exhaustion during request processing in mod_http2 can lead to a use-after-free (bsc#1267972).
  • CVE-2026-49975: Fix cookie header accounting against LimitRequestFields (bsc#1267503).
Record
SUSE-SU-2026:2735-1
Updated
2026-11-02
OSVSUSE-SU-2026:2759-1 No score

Security update for apache2

This update for apache2 fixes the following issues

  • CVE-2026-29167: mod_ldap per-dir use-after-free (bsc#1267976).
  • CVE-2026-29170: mod_proxy_ftp XSS (bsc#1267977).
  • CVE-2026-34355: mod_proxy_html buffer overflow (bsc#1267978).
  • CVE-2026-34356: malicious backend servers can lead to a heap-based buffer overflow (bsc#1267955).
  • CVE-2026-42535: malicious path manipulation can lead to child process crashes (bsc#1267956).
  • CVE-2026-42536: processing untrusted content can lead to a heap-based buffer overflow (bsc#1267962).
  • CVE-2026-43951: out-of-bound read in merge_response_headers can cause crash (bsc#1267963).
  • CVE-2026-44119: improper privilege management can lead to an unauthorized read (bsc#1267965).
  • CVE-2026-44185: Stack Buffer Over-Read in mod_ssl OCSP send_request (bsc#1267969).
  • CVE-2026-44186: responses from an attacker-controlled FTP backend can lead to resource exhaustion and a denial of service (bsc#1267970).
  • CVE-2026-44631: crafted regular expression can lead to a buffer underwrite (bsc#1267971).
  • CVE-2026-48913: file handle exhaustion during request processing in mod_http2 can lead to a use-after-free (bsc#1267972).
  • CVE-2026-49975: Fix cookie header accounting against LimitRequestFields (bsc#1267503).
Record
SUSE-SU-2026:2759-1
Updated
2026-11-02
OSVUSN-8516-1 No score

apache2 vulnerabilities

It was discovered that Apache HTTP Server's mod_ldap module incorrectly handled memory when processing per-directory configurations. An attacker could use this issue to cause the server to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2026-29167)

It was discovered that Apache HTTP Server's mod_proxy_ftp module incorrectly handled HTML generation for FTP directory listings. A remote attacker could possibly use this issue to inject arbitrary web script or HTML. (CVE-2026-29170)

It was discovered that Apache HTTP Server's mod_proxy_html module incorrectly handled certain content from an untrusted backend. A remote attacker could possibly use this issue to cause Apache HTTP Server to crash, resulting in a denial of service. (CVE-2026-34355)

It was discovered that Apache HTTP Server incorrectly handled ProxyPassReverseCookie directives with a malicious backend server. A remote attacker could possibly use this issue to cause Apache HTTP Server to crash, resulting in a denial of service. (CVE-2026-34356)

It was discovered that Apache HTTP Server's mod_dav_fs module incorrectly handled certain path operations. An authenticated user could possibly use this issue to manipulate trusted WebDAV property databases or cause a denial of service. (CVE-2026-42535)

It was discovered that Apache HTTP Server's mod_xml2enc module incorrectly handled certain content from an untrusted backend. A remote attacker could possibly use this issue to cause Apache HTTP Server to crash, resulting in a denial of service. (CVE-2026-42536)

It was discovered that Apache HTTP Server incorrectly handled response headers when multiple content languages were configured. A remote attacker could possibly use this issue to obtain sensitive information. (CVE-2026-43951)

It was discovered that Apache HTTP Server incorrectly restricted certain file functions in expressions within .htaccess files. A local attacker with .htaccess write access could possibly use this issue to obtain sensitive information. (CVE-2026-44119)

It was discovered that Apache HTTP Server's mod_ssl module incorrectly handled OCSP responses from an attacker-controlled server. A remote attacker could possibly use this issue to obtain sensitive information or cause a denial of service. (CVE-2026-44185)

It was discovered that Apache HTTP Server's mod_proxy_ftp module incorrectly handled responses from an attacker-controlled backend FTP server. A remote attacker could possibly use this issue to cause Apache HTTP Server to stop responding, resulting in a denial of service. (CVE-2026-44186)

It was discovered that Apache HTTP Server incorrectly handled crafted regular expressions in the server configuration. An attacker could possibly use this issue to execute arbitrary code or cause a denial of service. (CVE-2026-44631)

It was discovered that Apache HTTP Server's mod_http2 module had a use-after-free vulnerability when file handles were exhausted. A remote attacker could possibly use this issue to cause Apache HTTP Server to crash, resulting in a denial of service. (CVE-2026-48913)

Record
USN-8516-1
Updated
2026-11-02
OSVUSN-8589-1 No score

apache2 vulnerabilities

It was discovered that Apache HTTP Server's mod_ldap module incorrectly handled memory when processing per-directory configurations. A remote attacker could possibly use this issue to cause a denial of service or execute arbitrary code. (CVE-2026-29167)

It was discovered that Apache HTTP Server's mod_proxy_ftp module incorrectly handled HTML generation for FTP directory listings. A remote attacker could possibly use this issue to inject arbitrary web script or HTML. (CVE-2026-29170)

Nitescu Lucian discovered that Apache HTTP Server's mod_auth_digest module was vulnerable to a timing attack. A remote attacker could possibly use this issue to bypass Digest authentication. (CVE-2026-33006)

Record
USN-8589-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
apache2
Alpine:v3.21
 before 2.4.68-r0
2.4.68-r0
apache2
Alpine:v3.22
 before 2.4.68-r0
2.4.68-r0
apache2
Alpine:v3.23
 before 2.4.68-r0
2.4.68-r0
apache2
Alpine:v3.24
 before 2.4.68-r0
2.4.68-r0
httpd
Azure Linux:3
 before 2.4.68-1
2.4.68-1
apache2
Alpaquita:23
 2.4.54-r2 up to 2.4.68-r0
2.4.68-r0
apache2
Alpaquita:25
 2.4.63-r0 up to 2.4.68-r0
2.4.68-r0
apache2
Alpaquita:stream
 2.4.56-r0 up to 2.4.68-r0
2.4.68-r0
apache
Bitnami
 before 2.4.68
2.4.68
httpd
TuxCare:CentOS:8.4
From an advisory covering 6 CVEs
 before 2.4.37-39.module_el8.4.0+2421+a085f2da.1.tuxcare.els20
2.4.37-39.module_el8.4.0+2421+a085f2da.1.tuxcare.els20
Show 179 moreShow less
Affected packages
PackageAffectedFixed
httpd-devel
TuxCare:CentOS:8.4
From an advisory covering 6 CVEs
 before 2.4.37-39.module_el8.4.0+2421+a085f2da.1.tuxcare.els20
2.4.37-39.module_el8.4.0+2421+a085f2da.1.tuxcare.els20
httpd-filesystem
TuxCare:CentOS:8.4
From an advisory covering 6 CVEs
 before 2.4.37-39.module_el8.4.0+2421+a085f2da.1.tuxcare.els20
2.4.37-39.module_el8.4.0+2421+a085f2da.1.tuxcare.els20
httpd-manual
TuxCare:CentOS:8.4
From an advisory covering 6 CVEs
 before 2.4.37-39.module_el8.4.0+2421+a085f2da.1.tuxcare.els20
2.4.37-39.module_el8.4.0+2421+a085f2da.1.tuxcare.els20
httpd-tools
TuxCare:CentOS:8.4
From an advisory covering 6 CVEs
 before 2.4.37-39.module_el8.4.0+2421+a085f2da.1.tuxcare.els20
2.4.37-39.module_el8.4.0+2421+a085f2da.1.tuxcare.els20
mod_ldap
TuxCare:CentOS:8.4
From an advisory covering 6 CVEs
 before 2.4.37-39.module_el8.4.0+2421+a085f2da.1.tuxcare.els20
2.4.37-39.module_el8.4.0+2421+a085f2da.1.tuxcare.els20
mod_proxy_html
TuxCare:CentOS:8.4
From an advisory covering 6 CVEs
 before 1:2.4.37-39.module_el8.4.0+2421+a085f2da.1.tuxcare.els20
1:2.4.37-39.module_el8.4.0+2421+a085f2da.1.tuxcare.els20
mod_session
TuxCare:CentOS:8.4
From an advisory covering 6 CVEs
 before 2.4.37-39.module_el8.4.0+2421+a085f2da.1.tuxcare.els20
2.4.37-39.module_el8.4.0+2421+a085f2da.1.tuxcare.els20
mod_ssl
TuxCare:CentOS:8.4
From an advisory covering 6 CVEs
 before 1:2.4.37-39.module_el8.4.0+2421+a085f2da.1.tuxcare.els20
1:2.4.37-39.module_el8.4.0+2421+a085f2da.1.tuxcare.els20
httpd
TuxCare:CentOS:8.5
From an advisory covering 6 CVEs
 before 2.4.37-43.module_el8.5.0+2423+fb27f08c.tuxcare.els19
2.4.37-43.module_el8.5.0+2423+fb27f08c.tuxcare.els19
httpd-devel
TuxCare:CentOS:8.5
From an advisory covering 6 CVEs
 before 2.4.37-43.module_el8.5.0+2423+fb27f08c.tuxcare.els19
2.4.37-43.module_el8.5.0+2423+fb27f08c.tuxcare.els19
httpd-filesystem
TuxCare:CentOS:8.5
From an advisory covering 6 CVEs
 before 2.4.37-43.module_el8.5.0+2423+fb27f08c.tuxcare.els19
2.4.37-43.module_el8.5.0+2423+fb27f08c.tuxcare.els19
httpd-manual
TuxCare:CentOS:8.5
From an advisory covering 6 CVEs
 before 2.4.37-43.module_el8.5.0+2423+fb27f08c.tuxcare.els19
2.4.37-43.module_el8.5.0+2423+fb27f08c.tuxcare.els19
httpd-tools
TuxCare:CentOS:8.5
From an advisory covering 6 CVEs
 before 2.4.37-43.module_el8.5.0+2423+fb27f08c.tuxcare.els19
2.4.37-43.module_el8.5.0+2423+fb27f08c.tuxcare.els19
mod_ldap
TuxCare:CentOS:8.5
From an advisory covering 6 CVEs
 before 2.4.37-43.module_el8.5.0+2423+fb27f08c.tuxcare.els19
2.4.37-43.module_el8.5.0+2423+fb27f08c.tuxcare.els19
mod_proxy_html
TuxCare:CentOS:8.5
From an advisory covering 6 CVEs
 before 1:2.4.37-43.module_el8.5.0+2423+fb27f08c.tuxcare.els19
1:2.4.37-43.module_el8.5.0+2423+fb27f08c.tuxcare.els19
mod_session
TuxCare:CentOS:8.5
From an advisory covering 6 CVEs
 before 2.4.37-43.module_el8.5.0+2423+fb27f08c.tuxcare.els19
2.4.37-43.module_el8.5.0+2423+fb27f08c.tuxcare.els19
mod_ssl
TuxCare:CentOS:8.5
From an advisory covering 6 CVEs
 before 1:2.4.37-43.module_el8.5.0+2423+fb27f08c.tuxcare.els19
1:2.4.37-43.module_el8.5.0+2423+fb27f08c.tuxcare.els19
httpd
TuxCare:CentOS-Stream:8
From an advisory covering 6 CVEs
 before 2.4.37-64.module_el8+2422+07117e8f.tuxcare.els7
2.4.37-64.module_el8+2422+07117e8f.tuxcare.els7
httpd-devel
TuxCare:CentOS-Stream:8
From an advisory covering 6 CVEs
 before 2.4.37-64.module_el8+2422+07117e8f.tuxcare.els7
2.4.37-64.module_el8+2422+07117e8f.tuxcare.els7
httpd-filesystem
TuxCare:CentOS-Stream:8
From an advisory covering 6 CVEs
 before 2.4.37-64.module_el8+2422+07117e8f.tuxcare.els7
2.4.37-64.module_el8+2422+07117e8f.tuxcare.els7
httpd-manual
TuxCare:CentOS-Stream:8
From an advisory covering 6 CVEs
 before 2.4.37-64.module_el8+2422+07117e8f.tuxcare.els7
2.4.37-64.module_el8+2422+07117e8f.tuxcare.els7
httpd-tools
TuxCare:CentOS-Stream:8
From an advisory covering 6 CVEs
 before 2.4.37-64.module_el8+2422+07117e8f.tuxcare.els7
2.4.37-64.module_el8+2422+07117e8f.tuxcare.els7
mod_ldap
TuxCare:CentOS-Stream:8
From an advisory covering 6 CVEs
 before 2.4.37-64.module_el8+2422+07117e8f.tuxcare.els7
2.4.37-64.module_el8+2422+07117e8f.tuxcare.els7
mod_proxy_html
TuxCare:CentOS-Stream:8
From an advisory covering 6 CVEs
 before 1:2.4.37-64.module_el8+2422+07117e8f.tuxcare.els7
1:2.4.37-64.module_el8+2422+07117e8f.tuxcare.els7
mod_session
TuxCare:CentOS-Stream:8
From an advisory covering 6 CVEs
 before 2.4.37-64.module_el8+2422+07117e8f.tuxcare.els7
2.4.37-64.module_el8+2422+07117e8f.tuxcare.els7
mod_ssl
TuxCare:CentOS-Stream:8
From an advisory covering 6 CVEs
 before 1:2.4.37-64.module_el8+2422+07117e8f.tuxcare.els7
1:2.4.37-64.module_el8+2422+07117e8f.tuxcare.els7
httpd
TuxCare:AlmaLinux:9.6
From an advisory covering 3 CVEs
 before 2.4.62-4.el9_6.4.tuxcare.els5
2.4.62-4.el9_6.4.tuxcare.els5
httpd-core
TuxCare:AlmaLinux:9.6
From an advisory covering 3 CVEs
 before 2.4.62-4.el9_6.4.tuxcare.els5
2.4.62-4.el9_6.4.tuxcare.els5
httpd-devel
TuxCare:AlmaLinux:9.6
From an advisory covering 3 CVEs
 before 2.4.62-4.el9_6.4.tuxcare.els5
2.4.62-4.el9_6.4.tuxcare.els5
httpd-filesystem
TuxCare:AlmaLinux:9.6
From an advisory covering 3 CVEs
 before 2.4.62-4.el9_6.4.tuxcare.els5
2.4.62-4.el9_6.4.tuxcare.els5
httpd-manual
TuxCare:AlmaLinux:9.6
From an advisory covering 3 CVEs
 before 2.4.62-4.el9_6.4.tuxcare.els5
2.4.62-4.el9_6.4.tuxcare.els5
httpd-tools
TuxCare:AlmaLinux:9.6
From an advisory covering 3 CVEs
 before 2.4.62-4.el9_6.4.tuxcare.els5
2.4.62-4.el9_6.4.tuxcare.els5
mod_ldap
TuxCare:AlmaLinux:9.6
From an advisory covering 3 CVEs
 before 2.4.62-4.el9_6.4.tuxcare.els5
2.4.62-4.el9_6.4.tuxcare.els5
mod_lua
TuxCare:AlmaLinux:9.6
From an advisory covering 3 CVEs
 before 2.4.62-4.el9_6.4.tuxcare.els5
2.4.62-4.el9_6.4.tuxcare.els5
mod_proxy_html
TuxCare:AlmaLinux:9.6
From an advisory covering 3 CVEs
 before 1:2.4.62-4.el9_6.4.tuxcare.els5
1:2.4.62-4.el9_6.4.tuxcare.els5
mod_session
TuxCare:AlmaLinux:9.6
From an advisory covering 3 CVEs
 before 2.4.62-4.el9_6.4.tuxcare.els5
2.4.62-4.el9_6.4.tuxcare.els5
mod_ssl
TuxCare:AlmaLinux:9.6
From an advisory covering 3 CVEs
 before 1:2.4.62-4.el9_6.4.tuxcare.els5
1:2.4.62-4.el9_6.4.tuxcare.els5
httpd
TuxCare:OracleLinux:7
From an advisory covering 5 CVEs
 before 2.4.6-99.0.5.el7_9.1.tuxcare.els12
2.4.6-99.0.5.el7_9.1.tuxcare.els12
httpd-devel
TuxCare:OracleLinux:7
From an advisory covering 5 CVEs
 before 2.4.6-99.0.5.el7_9.1.tuxcare.els12
2.4.6-99.0.5.el7_9.1.tuxcare.els12
httpd-manual
TuxCare:OracleLinux:7
From an advisory covering 5 CVEs
 before 2.4.6-99.0.5.el7_9.1.tuxcare.els12
2.4.6-99.0.5.el7_9.1.tuxcare.els12
httpd-tools
TuxCare:OracleLinux:7
From an advisory covering 5 CVEs
 before 2.4.6-99.0.5.el7_9.1.tuxcare.els12
2.4.6-99.0.5.el7_9.1.tuxcare.els12
mod_ldap
TuxCare:OracleLinux:7
From an advisory covering 5 CVEs
 before 2.4.6-99.0.5.el7_9.1.tuxcare.els12
2.4.6-99.0.5.el7_9.1.tuxcare.els12
mod_proxy_html
TuxCare:OracleLinux:7
From an advisory covering 5 CVEs
 before 1:2.4.6-99.0.5.el7_9.1.tuxcare.els12
1:2.4.6-99.0.5.el7_9.1.tuxcare.els12
mod_session
TuxCare:OracleLinux:7
From an advisory covering 5 CVEs
 before 2.4.6-99.0.5.el7_9.1.tuxcare.els12
2.4.6-99.0.5.el7_9.1.tuxcare.els12
mod_ssl
TuxCare:OracleLinux:7
From an advisory covering 5 CVEs
 before 1:2.4.6-99.0.5.el7_9.1.tuxcare.els12
1:2.4.6-99.0.5.el7_9.1.tuxcare.els12
httpd
TuxCare:CentOS:6
From an advisory covering 2 CVEs
 before 2.2.15-72.el6.tuxcare.els14
2.2.15-72.el6.tuxcare.els14
httpd-devel
TuxCare:CentOS:6
From an advisory covering 2 CVEs
 before 2.2.15-72.el6.tuxcare.els14
2.2.15-72.el6.tuxcare.els14
httpd-manual
TuxCare:CentOS:6
From an advisory covering 2 CVEs
 before 2.2.15-72.el6.tuxcare.els14
2.2.15-72.el6.tuxcare.els14
httpd-tools
TuxCare:CentOS:6
From an advisory covering 2 CVEs
 before 2.2.15-72.el6.tuxcare.els14
2.2.15-72.el6.tuxcare.els14
mod_ssl
TuxCare:CentOS:6
From an advisory covering 2 CVEs
 before 1:2.2.15-72.el6.tuxcare.els14
1:2.2.15-72.el6.tuxcare.els14
httpd
TuxCare:OracleLinux:6
From an advisory covering 2 CVEs
 before 2.2.15-72.el6.tuxcare.els14
2.2.15-72.el6.tuxcare.els14
httpd-devel
TuxCare:OracleLinux:6
From an advisory covering 2 CVEs
 before 2.2.15-72.el6.tuxcare.els14
2.2.15-72.el6.tuxcare.els14
httpd-manual
TuxCare:OracleLinux:6
From an advisory covering 2 CVEs
 before 2.2.15-72.el6.tuxcare.els14
2.2.15-72.el6.tuxcare.els14
httpd-tools
TuxCare:OracleLinux:6
From an advisory covering 2 CVEs
 before 2.2.15-72.el6.tuxcare.els14
2.2.15-72.el6.tuxcare.els14
mod_ssl
TuxCare:OracleLinux:6
From an advisory covering 2 CVEs
 before 1:2.2.15-72.el6.tuxcare.els14
1:2.2.15-72.el6.tuxcare.els14
httpd
TuxCare:RHEL:7
From an advisory covering 5 CVEs
 before 2.4.6-99.0.5.el7_9.1.tuxcare.els12
2.4.6-99.0.5.el7_9.1.tuxcare.els12
httpd-devel
TuxCare:RHEL:7
From an advisory covering 5 CVEs
 before 2.4.6-99.0.5.el7_9.1.tuxcare.els12
2.4.6-99.0.5.el7_9.1.tuxcare.els12
httpd-manual
TuxCare:RHEL:7
From an advisory covering 5 CVEs
 before 2.4.6-99.0.5.el7_9.1.tuxcare.els12
2.4.6-99.0.5.el7_9.1.tuxcare.els12
httpd-tools
TuxCare:RHEL:7
From an advisory covering 5 CVEs
 before 2.4.6-99.0.5.el7_9.1.tuxcare.els12
2.4.6-99.0.5.el7_9.1.tuxcare.els12
mod_ldap
TuxCare:RHEL:7
From an advisory covering 5 CVEs
 before 2.4.6-99.0.5.el7_9.1.tuxcare.els12
2.4.6-99.0.5.el7_9.1.tuxcare.els12
mod_proxy_html
TuxCare:RHEL:7
From an advisory covering 5 CVEs
 before 1:2.4.6-99.0.5.el7_9.1.tuxcare.els12
1:2.4.6-99.0.5.el7_9.1.tuxcare.els12
mod_session
TuxCare:RHEL:7
From an advisory covering 5 CVEs
 before 2.4.6-99.0.5.el7_9.1.tuxcare.els12
2.4.6-99.0.5.el7_9.1.tuxcare.els12
mod_ssl
TuxCare:RHEL:7
From an advisory covering 5 CVEs
 before 1:2.4.6-99.0.5.el7_9.1.tuxcare.els12
1:2.4.6-99.0.5.el7_9.1.tuxcare.els12
apache2
TuxCare:Ubuntu:16.04
From an advisory covering 5 CVEs
 before 1:2.4.18-2ubuntu3.17+tuxcare.els20
1:2.4.18-2ubuntu3.17+tuxcare.els20
apache2-bin
TuxCare:Ubuntu:16.04
From an advisory covering 5 CVEs
 before 1:2.4.18-2ubuntu3.17+tuxcare.els20
1:2.4.18-2ubuntu3.17+tuxcare.els20
apache2-data
TuxCare:Ubuntu:16.04
From an advisory covering 5 CVEs
 before 1:2.4.18-2ubuntu3.17+tuxcare.els20
1:2.4.18-2ubuntu3.17+tuxcare.els20
apache2-dev
TuxCare:Ubuntu:16.04
From an advisory covering 5 CVEs
 before 1:2.4.18-2ubuntu3.17+tuxcare.els20
1:2.4.18-2ubuntu3.17+tuxcare.els20
apache2-doc
TuxCare:Ubuntu:16.04
From an advisory covering 5 CVEs
 before 1:2.4.18-2ubuntu3.17+tuxcare.els20
1:2.4.18-2ubuntu3.17+tuxcare.els20
apache2-suexec-custom
TuxCare:Ubuntu:16.04
From an advisory covering 5 CVEs
 before 1:2.4.18-2ubuntu3.17+tuxcare.els20
1:2.4.18-2ubuntu3.17+tuxcare.els20
apache2-suexec-pristine
TuxCare:Ubuntu:16.04
From an advisory covering 5 CVEs
 before 1:2.4.18-2ubuntu3.17+tuxcare.els20
1:2.4.18-2ubuntu3.17+tuxcare.els20
apache2-utils
TuxCare:Ubuntu:16.04
From an advisory covering 5 CVEs
 before 1:2.4.18-2ubuntu3.17+tuxcare.els20
1:2.4.18-2ubuntu3.17+tuxcare.els20
apache2
TuxCare:Ubuntu:18.04
From an advisory covering 5 CVEs
 before 2.4.29-1ubuntu4.27+tuxcare.els10
2.4.29-1ubuntu4.27+tuxcare.els10
apache2-bin
TuxCare:Ubuntu:18.04
From an advisory covering 5 CVEs
 before 2.4.29-1ubuntu4.27+tuxcare.els10
2.4.29-1ubuntu4.27+tuxcare.els10
apache2-data
TuxCare:Ubuntu:18.04
From an advisory covering 5 CVEs
 before 2.4.29-1ubuntu4.27+tuxcare.els10
2.4.29-1ubuntu4.27+tuxcare.els10
apache2-dev
TuxCare:Ubuntu:18.04
From an advisory covering 5 CVEs
 before 2.4.29-1ubuntu4.27+tuxcare.els10
2.4.29-1ubuntu4.27+tuxcare.els10
apache2-doc
TuxCare:Ubuntu:18.04
From an advisory covering 5 CVEs
 before 2.4.29-1ubuntu4.27+tuxcare.els10
2.4.29-1ubuntu4.27+tuxcare.els10
apache2-ssl-dev
TuxCare:Ubuntu:18.04
From an advisory covering 5 CVEs
 before 2.4.29-1ubuntu4.27+tuxcare.els10
2.4.29-1ubuntu4.27+tuxcare.els10
apache2-suexec-custom
TuxCare:Ubuntu:18.04
From an advisory covering 5 CVEs
 before 2.4.29-1ubuntu4.27+tuxcare.els10
2.4.29-1ubuntu4.27+tuxcare.els10
apache2-suexec-pristine
TuxCare:Ubuntu:18.04
From an advisory covering 5 CVEs
 before 2.4.29-1ubuntu4.27+tuxcare.els10
2.4.29-1ubuntu4.27+tuxcare.els10
apache2-utils
TuxCare:Ubuntu:18.04
From an advisory covering 5 CVEs
 before 2.4.29-1ubuntu4.27+tuxcare.els10
2.4.29-1ubuntu4.27+tuxcare.els10
apache2
Debian:12
 before 2.4.68-1~deb12u1, plus listed versions
2.4.57-22.4.57-32.4.58-12.4.59-12.4.59-1~deb10u1
Show 45 moreShow less
2.4.59-1~deb11u12.4.59-1~deb12u12.4.59-22.4.60-12.4.61-12.4.61-1~deb11u12.4.61-1~deb12u12.4.62-12.4.62-1~deb11u12.4.62-1~deb11u22.4.62-1~deb12u12.4.62-1~deb12u22.4.62-22.4.62-32.4.62-42.4.62-52.4.62-62.4.63-12.4.64-12.4.65-12.4.65-1~deb11u12.4.65-1~deb12u12.4.65-22.4.65-32.4.66-12.4.66-1~deb11u12.4.66-1~deb12u12.4.66-1~deb12u22.4.66-1~deb13u12.4.66-1~deb13u22.4.66-22.4.66-32.4.66-42.4.66-52.4.66-62.4.66-72.4.66-82.4.67-12.4.67-1~deb11u12.4.67-1~deb11u22.4.67-1~deb11u32.4.67-1~deb12u12.4.67-1~deb12u22.4.67-1~deb12u32.4.67-1~deb13u1
2.4.68-1~deb12u1
apache2
Debian:13
 before 2.4.68-1~deb13u1, plus listed versions
2.4.65-22.4.65-32.4.66-12.4.66-1~deb11u12.4.66-1~deb12u1
Show 22 moreShow less
2.4.66-1~deb12u22.4.66-1~deb13u12.4.66-1~deb13u22.4.66-22.4.66-32.4.66-42.4.66-52.4.66-62.4.66-72.4.66-82.4.67-12.4.67-1~deb11u12.4.67-1~deb11u22.4.67-1~deb11u32.4.67-1~deb12u12.4.67-1~deb12u22.4.67-1~deb12u32.4.67-1~deb13u12.4.67-1~deb13u22.4.67-1~deb13u32.4.67-22.4.68-1~deb12u1
2.4.68-1~deb13u1
apache2
Debian:14
 before 2.4.68-1, plus listed versions
2.4.65-22.4.65-32.4.66-12.4.66-1~deb11u12.4.66-1~deb12u1
Show 23 moreShow less
2.4.66-1~deb12u22.4.66-1~deb13u12.4.66-1~deb13u22.4.66-22.4.66-32.4.66-42.4.66-52.4.66-62.4.66-72.4.66-82.4.67-12.4.67-1~deb11u12.4.67-1~deb11u22.4.67-1~deb11u32.4.67-1~deb12u12.4.67-1~deb12u22.4.67-1~deb12u32.4.67-1~deb13u12.4.67-1~deb13u22.4.67-1~deb13u32.4.67-22.4.68-1~deb12u12.4.68-1~deb13u1
2.4.68-1
apache
Mageia:10
From an advisory covering 13 CVEs
 before 2.4.68-1.mga10
2.4.68-1.mga10
apache
Mageia:9
From an advisory covering 13 CVEs
 before 2.4.68-1.mga9
2.4.68-1.mga9
httpd
openEuler:20.03-LTS-SP4
From an advisory covering 8 CVEs
 before 2.4.43-37.oe2003sp4
2.4.43-37.oe2003sp4
httpd
openEuler:22.03-LTS-SP4
From an advisory covering 9 CVEs
 before 2.4.51-33.oe2203sp4
2.4.51-33.oe2203sp4
httpd
openEuler:24.03-LTS-SP1
From an advisory covering 11 CVEs
 before 2.4.58-20.oe2403sp1
2.4.58-20.oe2403sp1
httpd
openEuler:24.03-LTS-SP3
From an advisory covering 11 CVEs
 before 2.4.58-20.oe2403sp3
2.4.58-20.oe2403sp3
httpd
Red Hat:hummingbird:1
From an advisory covering 13 CVEs
 before 0:2.4.68-1.hum1
0:2.4.68-1.hum1
httpd-core
Red Hat:hummingbird:1
From an advisory covering 13 CVEs
 before 0:2.4.68-1.hum1
0:2.4.68-1.hum1
httpd-devel
Red Hat:hummingbird:1
From an advisory covering 13 CVEs
 before 0:2.4.68-1.hum1
0:2.4.68-1.hum1
httpd-filesystem
Red Hat:hummingbird:1
From an advisory covering 13 CVEs
 before 0:2.4.68-1.hum1
0:2.4.68-1.hum1
httpd-manual
Red Hat:hummingbird:1
From an advisory covering 13 CVEs
 before 0:2.4.68-1.hum1
0:2.4.68-1.hum1
httpd-tools
Red Hat:hummingbird:1
From an advisory covering 13 CVEs
 before 0:2.4.68-1.hum1
0:2.4.68-1.hum1
jbcs-httpd24-httpd
Red Hat:jboss_core_services:1::el8
From an advisory covering 15 CVEs
 before 0:2.4.62-16.el8jbcs
0:2.4.62-16.el8jbcs
jbcs-httpd24-httpd-debuginfo
Red Hat:jboss_core_services:1::el8
From an advisory covering 15 CVEs
 before 0:2.4.62-16.el8jbcs
0:2.4.62-16.el8jbcs
jbcs-httpd24-httpd-devel
Red Hat:jboss_core_services:1::el8
From an advisory covering 15 CVEs
 before 0:2.4.62-16.el8jbcs
0:2.4.62-16.el8jbcs
jbcs-httpd24-httpd-manual
Red Hat:jboss_core_services:1::el8
From an advisory covering 15 CVEs
 before 0:2.4.62-16.el8jbcs
0:2.4.62-16.el8jbcs
jbcs-httpd24-httpd-selinux
Red Hat:jboss_core_services:1::el8
From an advisory covering 15 CVEs
 before 0:2.4.62-16.el8jbcs
0:2.4.62-16.el8jbcs
jbcs-httpd24-httpd-tools
Red Hat:jboss_core_services:1::el8
From an advisory covering 15 CVEs
 before 0:2.4.62-16.el8jbcs
0:2.4.62-16.el8jbcs
jbcs-httpd24-httpd-tools-debuginfo
Red Hat:jboss_core_services:1::el8
From an advisory covering 15 CVEs
 before 0:2.4.62-16.el8jbcs
0:2.4.62-16.el8jbcs
jbcs-httpd24-mod_ldap
Red Hat:jboss_core_services:1::el8
From an advisory covering 15 CVEs
 before 0:2.4.62-16.el8jbcs
0:2.4.62-16.el8jbcs
jbcs-httpd24-mod_ldap-debuginfo
Red Hat:jboss_core_services:1::el8
From an advisory covering 15 CVEs
 before 0:2.4.62-16.el8jbcs
0:2.4.62-16.el8jbcs
jbcs-httpd24-mod_proxy_html
Red Hat:jboss_core_services:1::el8
From an advisory covering 15 CVEs
 before 1:2.4.62-16.el8jbcs
1:2.4.62-16.el8jbcs
jbcs-httpd24-mod_proxy_html-debuginfo
Red Hat:jboss_core_services:1::el8
From an advisory covering 15 CVEs
 before 1:2.4.62-16.el8jbcs
1:2.4.62-16.el8jbcs
jbcs-httpd24-mod_session
Red Hat:jboss_core_services:1::el8
From an advisory covering 15 CVEs
 before 0:2.4.62-16.el8jbcs
0:2.4.62-16.el8jbcs
jbcs-httpd24-mod_session-debuginfo
Red Hat:jboss_core_services:1::el8
From an advisory covering 15 CVEs
 before 0:2.4.62-16.el8jbcs
0:2.4.62-16.el8jbcs
jbcs-httpd24-mod_ssl
Red Hat:jboss_core_services:1::el8
From an advisory covering 15 CVEs
 before 1:2.4.62-16.el8jbcs
1:2.4.62-16.el8jbcs
jbcs-httpd24-mod_ssl-debuginfo
Red Hat:jboss_core_services:1::el8
From an advisory covering 15 CVEs
 before 1:2.4.62-16.el8jbcs
1:2.4.62-16.el8jbcs
jbcs-httpd24-mod_http2
Red Hat:jboss_core_services:1::el8
From an advisory covering 15 CVEs
 before 0:2.0.29-13.el8jbcs
0:2.0.29-13.el8jbcs
jbcs-httpd24-mod_http2-debuginfo
Red Hat:jboss_core_services:1::el8
From an advisory covering 15 CVEs
 before 0:2.0.29-13.el8jbcs
0:2.0.29-13.el8jbcs
apache2
SUSE:Linux Enterprise Server 16.0
From an advisory covering 13 CVEs
 before 2.4.66-160000.3.1
2.4.66-160000.3.1
apache2-devel
SUSE:Linux Enterprise Server 16.0
From an advisory covering 13 CVEs
 before 2.4.66-160000.3.1
2.4.66-160000.3.1
apache2-event
SUSE:Linux Enterprise Server 16.0
From an advisory covering 13 CVEs
 before 2.4.66-160000.3.1
2.4.66-160000.3.1
apache2-manual
SUSE:Linux Enterprise Server 16.0
From an advisory covering 13 CVEs
 before 2.4.66-160000.3.1
2.4.66-160000.3.1
apache2-prefork
SUSE:Linux Enterprise Server 16.0
From an advisory covering 13 CVEs
 before 2.4.66-160000.3.1
2.4.66-160000.3.1
apache2-utils
SUSE:Linux Enterprise Server 16.0
From an advisory covering 13 CVEs
 before 2.4.66-160000.3.1
2.4.66-160000.3.1
apache2-worker
SUSE:Linux Enterprise Server 16.0
From an advisory covering 13 CVEs
 before 2.4.66-160000.3.1
2.4.66-160000.3.1
apache2
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 13 CVEs
 before 2.4.66-160000.3.1
2.4.66-160000.3.1
apache2-devel
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 13 CVEs
 before 2.4.66-160000.3.1
2.4.66-160000.3.1
apache2-event
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 13 CVEs
 before 2.4.66-160000.3.1
2.4.66-160000.3.1
apache2-manual
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 13 CVEs
 before 2.4.66-160000.3.1
2.4.66-160000.3.1
apache2-prefork
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 13 CVEs
 before 2.4.66-160000.3.1
2.4.66-160000.3.1
apache2-utils
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 13 CVEs
 before 2.4.66-160000.3.1
2.4.66-160000.3.1
apache2-worker
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 13 CVEs
 before 2.4.66-160000.3.1
2.4.66-160000.3.1
apache2
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 66 CVEs
 before 2.4.66-150400.6.57.1
2.4.66-150400.6.57.1
apache2
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
From an advisory covering 66 CVEs
 before 2.4.66-150400.6.57.1
2.4.66-150400.6.57.1
apache2
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS
From an advisory covering 66 CVEs
 before 2.4.66-150400.6.57.1
2.4.66-150400.6.57.1
apache2
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS
From an advisory covering 66 CVEs
 before 2.4.66-150400.6.57.1
2.4.66-150400.6.57.1
apache2
SUSE:Linux Enterprise Server 15 SP4-LTSS
From an advisory covering 66 CVEs
 before 2.4.66-150400.6.57.1
2.4.66-150400.6.57.1
apache2
SUSE:Linux Enterprise Server 15 SP5-LTSS
From an advisory covering 66 CVEs
 before 2.4.66-150400.6.57.1
2.4.66-150400.6.57.1
apache2
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
From an advisory covering 66 CVEs
 before 2.4.66-150400.6.57.1
2.4.66-150400.6.57.1
apache2
SUSE:Linux Enterprise Server for SAP Applications 15 SP5
From an advisory covering 66 CVEs
 before 2.4.66-150400.6.57.1
2.4.66-150400.6.57.1
apache2
SUSE:Linux Enterprise Server 12 SP5-LTSS
From an advisory covering 13 CVEs
 before 2.4.66-35.81.1
2.4.66-35.81.1
apache2-tls13
SUSE:Linux Enterprise Server 12 SP5-LTSS
From an advisory covering 13 CVEs
 before 2.4.66-35.81.1
2.4.66-35.81.1
apache2
SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5
From an advisory covering 13 CVEs
 before 2.4.66-35.81.1
2.4.66-35.81.1
apache2-tls13
SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5
From an advisory covering 13 CVEs
 before 2.4.66-35.81.1
2.4.66-35.81.1
apache2
SUSE:Linux Enterprise Server 15 SP6-LTSS
From an advisory covering 13 CVEs
 before 2.4.66-150600.5.55.1
2.4.66-150600.5.55.1
apache2-devel
SUSE:Linux Enterprise Server 15 SP6-LTSS
From an advisory covering 13 CVEs
 before 2.4.66-150600.5.55.1
2.4.66-150600.5.55.1
apache2-manual
SUSE:Linux Enterprise Server 15 SP6-LTSS
From an advisory covering 13 CVEs
 before 2.4.66-150600.5.55.1
2.4.66-150600.5.55.1
apache2-prefork
SUSE:Linux Enterprise Server 15 SP6-LTSS
From an advisory covering 13 CVEs
 before 2.4.66-150600.5.55.1
2.4.66-150600.5.55.1
apache2-utils
SUSE:Linux Enterprise Server 15 SP6-LTSS
From an advisory covering 13 CVEs
 before 2.4.66-150600.5.55.1
2.4.66-150600.5.55.1
apache2-worker
SUSE:Linux Enterprise Server 15 SP6-LTSS
From an advisory covering 13 CVEs
 before 2.4.66-150600.5.55.1
2.4.66-150600.5.55.1
apache2
SUSE:Linux Enterprise Server for SAP Applications 15 SP6
From an advisory covering 13 CVEs
 before 2.4.66-150600.5.55.1
2.4.66-150600.5.55.1
apache2-devel
SUSE:Linux Enterprise Server for SAP Applications 15 SP6
From an advisory covering 13 CVEs
 before 2.4.66-150600.5.55.1
2.4.66-150600.5.55.1
apache2-manual
SUSE:Linux Enterprise Server for SAP Applications 15 SP6
From an advisory covering 13 CVEs
 before 2.4.66-150600.5.55.1
2.4.66-150600.5.55.1
apache2-prefork
SUSE:Linux Enterprise Server for SAP Applications 15 SP6
From an advisory covering 13 CVEs
 before 2.4.66-150600.5.55.1
2.4.66-150600.5.55.1
apache2-utils
SUSE:Linux Enterprise Server for SAP Applications 15 SP6
From an advisory covering 13 CVEs
 before 2.4.66-150600.5.55.1
2.4.66-150600.5.55.1
apache2-worker
SUSE:Linux Enterprise Server for SAP Applications 15 SP6
From an advisory covering 13 CVEs
 before 2.4.66-150600.5.55.1
2.4.66-150600.5.55.1
apache2
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 13 CVEs
 before 2.4.66-150700.4.23.1
2.4.66-150700.4.23.1
apache2-prefork
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 13 CVEs
 before 2.4.66-150700.4.23.1
2.4.66-150700.4.23.1
apache2-event
SUSE:Linux Enterprise Module for Package Hub 15 SP7
From an advisory covering 13 CVEs
 before 2.4.66-150700.4.23.1
2.4.66-150700.4.23.1
apache2-devel
SUSE:Linux Enterprise Module for Server Applications 15 SP7
From an advisory covering 13 CVEs
 before 2.4.66-150700.4.23.1
2.4.66-150700.4.23.1
apache2-manual
SUSE:Linux Enterprise Module for Server Applications 15 SP7
From an advisory covering 13 CVEs
 before 2.4.66-150700.4.23.1
2.4.66-150700.4.23.1
apache2-utils
SUSE:Linux Enterprise Module for Server Applications 15 SP7
From an advisory covering 13 CVEs
 before 2.4.66-150700.4.23.1
2.4.66-150700.4.23.1
apache2-worker
SUSE:Linux Enterprise Module for Server Applications 15 SP7
From an advisory covering 13 CVEs
 before 2.4.66-150700.4.23.1
2.4.66-150700.4.23.1
apache2
Ubuntu:Pro:14.04:LTS
 before 2.4.7-1ubuntu4.22+esm15, plus listed versions
2.4.6-2ubuntu22.4.6-2ubuntu32.4.6-2ubuntu42.4.7-1ubuntu12.4.7-1ubuntu2
Show 32 moreShow less
2.4.7-1ubuntu32.4.7-1ubuntu42.4.7-1ubuntu4.12.4.7-1ubuntu4.42.4.7-1ubuntu4.52.4.7-1ubuntu4.62.4.7-1ubuntu4.72.4.7-1ubuntu4.82.4.7-1ubuntu4.92.4.7-1ubuntu4.102.4.7-1ubuntu4.112.4.7-1ubuntu4.132.4.7-1ubuntu4.152.4.7-1ubuntu4.162.4.7-1ubuntu4.172.4.7-1ubuntu4.182.4.7-1ubuntu4.192.4.7-1ubuntu4.202.4.7-1ubuntu4.212.4.7-1ubuntu4.222.4.7-1ubuntu4.22+esm12.4.7-1ubuntu4.22+esm22.4.7-1ubuntu4.22+esm32.4.7-1ubuntu4.22+esm42.4.7-1ubuntu4.22+esm52.4.7-1ubuntu4.22+esm62.4.7-1ubuntu4.22+esm82.4.7-1ubuntu4.22+esm92.4.7-1ubuntu4.22+esm102.4.7-1ubuntu4.22+esm122.4.7-1ubuntu4.22+esm132.4.7-1ubuntu4.22+esm14
2.4.7-1ubuntu4.22+esm15
apache2
Ubuntu:Pro:16.04:LTS
 before 2.4.18-2ubuntu3.17+esm20, plus listed versions
2.4.12-2ubuntu22.4.17-1ubuntu12.4.17-2ubuntu12.4.17-3ubuntu12.4.18-1ubuntu1
Show 35 moreShow less
2.4.18-2ubuntu12.4.18-2ubuntu22.4.18-2ubuntu32.4.18-2ubuntu3.12.4.18-2ubuntu3.22.4.18-2ubuntu3.32.4.18-2ubuntu3.42.4.18-2ubuntu3.52.4.18-2ubuntu3.72.4.18-2ubuntu3.82.4.18-2ubuntu3.92.4.18-2ubuntu3.102.4.18-2ubuntu3.122.4.18-2ubuntu3.132.4.18-2ubuntu3.142.4.18-2ubuntu3.152.4.18-2ubuntu3.172.4.18-2ubuntu3.17+esm12.4.18-2ubuntu3.17+esm22.4.18-2ubuntu3.17+esm32.4.18-2ubuntu3.17+esm42.4.18-2ubuntu3.17+esm52.4.18-2ubuntu3.17+esm62.4.18-2ubuntu3.17+esm72.4.18-2ubuntu3.17+esm82.4.18-2ubuntu3.17+esm92.4.18-2ubuntu3.17+esm102.4.18-2ubuntu3.17+esm112.4.18-2ubuntu3.17+esm122.4.18-2ubuntu3.17+esm132.4.18-2ubuntu3.17+esm142.4.18-2ubuntu3.17+esm162.4.18-2ubuntu3.17+esm172.4.18-2ubuntu3.17+esm182.4.18-2ubuntu3.17+esm19
2.4.18-2ubuntu3.17+esm20
apache2
Ubuntu:Pro:18.04:LTS
 before 2.4.29-1ubuntu4.27+esm11, plus listed versions
2.4.27-2ubuntu32.4.29-1ubuntu12.4.29-1ubuntu22.4.29-1ubuntu32.4.29-1ubuntu4
Show 34 moreShow less
2.4.29-1ubuntu4.12.4.29-1ubuntu4.22.4.29-1ubuntu4.32.4.29-1ubuntu4.42.4.29-1ubuntu4.52.4.29-1ubuntu4.62.4.29-1ubuntu4.72.4.29-1ubuntu4.82.4.29-1ubuntu4.102.4.29-1ubuntu4.112.4.29-1ubuntu4.122.4.29-1ubuntu4.132.4.29-1ubuntu4.142.4.29-1ubuntu4.162.4.29-1ubuntu4.172.4.29-1ubuntu4.182.4.29-1ubuntu4.192.4.29-1ubuntu4.202.4.29-1ubuntu4.212.4.29-1ubuntu4.222.4.29-1ubuntu4.232.4.29-1ubuntu4.242.4.29-1ubuntu4.252.4.29-1ubuntu4.262.4.29-1ubuntu4.272.4.29-1ubuntu4.27+esm12.4.29-1ubuntu4.27+esm22.4.29-1ubuntu4.27+esm32.4.29-1ubuntu4.27+esm42.4.29-1ubuntu4.27+esm62.4.29-1ubuntu4.27+esm72.4.29-1ubuntu4.27+esm82.4.29-1ubuntu4.27+esm92.4.29-1ubuntu4.27+esm10
2.4.29-1ubuntu4.27+esm11
apache2
Ubuntu:Pro:20.04:LTS
 before 2.4.41-4ubuntu3.23+esm6, plus listed versions
2.4.41-1ubuntu12.4.41-4ubuntu12.4.41-4ubuntu22.4.41-4ubuntu32.4.41-4ubuntu3.1
Show 23 moreShow less
2.4.41-4ubuntu3.32.4.41-4ubuntu3.42.4.41-4ubuntu3.52.4.41-4ubuntu3.62.4.41-4ubuntu3.72.4.41-4ubuntu3.82.4.41-4ubuntu3.92.4.41-4ubuntu3.102.4.41-4ubuntu3.112.4.41-4ubuntu3.122.4.41-4ubuntu3.132.4.41-4ubuntu3.142.4.41-4ubuntu3.152.4.41-4ubuntu3.162.4.41-4ubuntu3.172.4.41-4ubuntu3.192.4.41-4ubuntu3.202.4.41-4ubuntu3.212.4.41-4ubuntu3.232.4.41-4ubuntu3.23+esm22.4.41-4ubuntu3.23+esm32.4.41-4ubuntu3.23+esm42.4.41-4ubuntu3.23+esm5
2.4.41-4ubuntu3.23+esm6
apache2
Ubuntu:22.04:LTS
 before 2.4.52-1ubuntu4.23, plus listed versions
2.4.48-3.1ubuntu32.4.48-3.1ubuntu42.4.51-2ubuntu12.4.52-1ubuntu12.4.52-1ubuntu2
Show 21 moreShow less
2.4.52-1ubuntu42.4.52-1ubuntu4.12.4.52-1ubuntu4.22.4.52-1ubuntu4.32.4.52-1ubuntu4.42.4.52-1ubuntu4.52.4.52-1ubuntu4.62.4.52-1ubuntu4.72.4.52-1ubuntu4.82.4.52-1ubuntu4.92.4.52-1ubuntu4.102.4.52-1ubuntu4.112.4.52-1ubuntu4.122.4.52-1ubuntu4.132.4.52-1ubuntu4.142.4.52-1ubuntu4.152.4.52-1ubuntu4.162.4.52-1ubuntu4.182.4.52-1ubuntu4.192.4.52-1ubuntu4.202.4.52-1ubuntu4.21
2.4.52-1ubuntu4.23
apache2
Ubuntu:24.04:LTS
 before 2.4.58-1ubuntu8.15, plus listed versions
2.4.57-2ubuntu22.4.57-2ubuntu32.4.58-1ubuntu12.4.58-1ubuntu22.4.58-1ubuntu6
Show 14 moreShow less
2.4.58-1ubuntu72.4.58-1ubuntu82.4.58-1ubuntu8.12.4.58-1ubuntu8.22.4.58-1ubuntu8.32.4.58-1ubuntu8.42.4.58-1ubuntu8.52.4.58-1ubuntu8.62.4.58-1ubuntu8.72.4.58-1ubuntu8.82.4.58-1ubuntu8.102.4.58-1ubuntu8.112.4.58-1ubuntu8.122.4.58-1ubuntu8.13
2.4.58-1ubuntu8.15
apache2
Ubuntu:25.10
 All versions, plus listed versions
2.4.63-1ubuntu12.4.63-1ubuntu32.4.64-1ubuntu22.4.64-1ubuntu32.4.64-1ubuntu3.22.4.64-1ubuntu3.32.4.64-1ubuntu3.42.4.64-1ubuntu3.5
 None known
apache2
Ubuntu:26.04:LTS
 before 2.4.66-2ubuntu2.4, plus listed versions
2.4.64-1ubuntu32.4.65-3ubuntu12.4.66-2ubuntu12.4.66-2ubuntu22.4.66-2ubuntu2.12.4.66-2ubuntu2.2
2.4.66-2ubuntu2.4
apache2
Ubuntu:22.04:LTS
From an advisory covering 12 CVEs
 before 2.4.52-1ubuntu4.23, plus listed versions
2.4.48-3.1ubuntu32.4.48-3.1ubuntu42.4.51-2ubuntu12.4.52-1ubuntu12.4.52-1ubuntu2
Show 21 moreShow less
2.4.52-1ubuntu42.4.52-1ubuntu4.12.4.52-1ubuntu4.22.4.52-1ubuntu4.32.4.52-1ubuntu4.42.4.52-1ubuntu4.52.4.52-1ubuntu4.62.4.52-1ubuntu4.72.4.52-1ubuntu4.82.4.52-1ubuntu4.92.4.52-1ubuntu4.102.4.52-1ubuntu4.112.4.52-1ubuntu4.122.4.52-1ubuntu4.132.4.52-1ubuntu4.142.4.52-1ubuntu4.152.4.52-1ubuntu4.162.4.52-1ubuntu4.182.4.52-1ubuntu4.192.4.52-1ubuntu4.202.4.52-1ubuntu4.21
2.4.52-1ubuntu4.23
apache2
Ubuntu:24.04:LTS
From an advisory covering 12 CVEs
 before 2.4.58-1ubuntu8.15, plus listed versions
2.4.57-2ubuntu22.4.57-2ubuntu32.4.58-1ubuntu12.4.58-1ubuntu22.4.58-1ubuntu6
Show 14 moreShow less
2.4.58-1ubuntu72.4.58-1ubuntu82.4.58-1ubuntu8.12.4.58-1ubuntu8.22.4.58-1ubuntu8.32.4.58-1ubuntu8.42.4.58-1ubuntu8.52.4.58-1ubuntu8.62.4.58-1ubuntu8.72.4.58-1ubuntu8.82.4.58-1ubuntu8.102.4.58-1ubuntu8.112.4.58-1ubuntu8.122.4.58-1ubuntu8.13
2.4.58-1ubuntu8.15
apache2
Ubuntu:26.04:LTS
From an advisory covering 12 CVEs
 before 2.4.66-2ubuntu2.4, plus listed versions
2.4.64-1ubuntu32.4.65-3ubuntu12.4.66-2ubuntu12.4.66-2ubuntu22.4.66-2ubuntu2.12.4.66-2ubuntu2.2
2.4.66-2ubuntu2.4
apache2
Ubuntu:Pro:14.04:LTS
From an advisory covering 3 CVEs
 before 2.4.7-1ubuntu4.22+esm15, plus listed versions
2.4.6-2ubuntu22.4.6-2ubuntu32.4.6-2ubuntu42.4.7-1ubuntu12.4.7-1ubuntu2
Show 32 moreShow less
2.4.7-1ubuntu32.4.7-1ubuntu42.4.7-1ubuntu4.12.4.7-1ubuntu4.42.4.7-1ubuntu4.52.4.7-1ubuntu4.62.4.7-1ubuntu4.72.4.7-1ubuntu4.82.4.7-1ubuntu4.92.4.7-1ubuntu4.102.4.7-1ubuntu4.112.4.7-1ubuntu4.132.4.7-1ubuntu4.152.4.7-1ubuntu4.162.4.7-1ubuntu4.172.4.7-1ubuntu4.182.4.7-1ubuntu4.192.4.7-1ubuntu4.202.4.7-1ubuntu4.212.4.7-1ubuntu4.222.4.7-1ubuntu4.22+esm12.4.7-1ubuntu4.22+esm22.4.7-1ubuntu4.22+esm32.4.7-1ubuntu4.22+esm42.4.7-1ubuntu4.22+esm52.4.7-1ubuntu4.22+esm62.4.7-1ubuntu4.22+esm82.4.7-1ubuntu4.22+esm92.4.7-1ubuntu4.22+esm102.4.7-1ubuntu4.22+esm122.4.7-1ubuntu4.22+esm132.4.7-1ubuntu4.22+esm14
2.4.7-1ubuntu4.22+esm15
apache2
Ubuntu:Pro:16.04:LTS
From an advisory covering 3 CVEs
 before 2.4.18-2ubuntu3.17+esm20, plus listed versions
2.4.12-2ubuntu22.4.17-1ubuntu12.4.17-2ubuntu12.4.17-3ubuntu12.4.18-1ubuntu1
Show 35 moreShow less
2.4.18-2ubuntu12.4.18-2ubuntu22.4.18-2ubuntu32.4.18-2ubuntu3.12.4.18-2ubuntu3.22.4.18-2ubuntu3.32.4.18-2ubuntu3.42.4.18-2ubuntu3.52.4.18-2ubuntu3.72.4.18-2ubuntu3.82.4.18-2ubuntu3.92.4.18-2ubuntu3.102.4.18-2ubuntu3.122.4.18-2ubuntu3.132.4.18-2ubuntu3.142.4.18-2ubuntu3.152.4.18-2ubuntu3.172.4.18-2ubuntu3.17+esm12.4.18-2ubuntu3.17+esm22.4.18-2ubuntu3.17+esm32.4.18-2ubuntu3.17+esm42.4.18-2ubuntu3.17+esm52.4.18-2ubuntu3.17+esm62.4.18-2ubuntu3.17+esm72.4.18-2ubuntu3.17+esm82.4.18-2ubuntu3.17+esm92.4.18-2ubuntu3.17+esm102.4.18-2ubuntu3.17+esm112.4.18-2ubuntu3.17+esm122.4.18-2ubuntu3.17+esm132.4.18-2ubuntu3.17+esm142.4.18-2ubuntu3.17+esm162.4.18-2ubuntu3.17+esm172.4.18-2ubuntu3.17+esm182.4.18-2ubuntu3.17+esm19
2.4.18-2ubuntu3.17+esm20
apache2
Ubuntu:Pro:18.04:LTS
From an advisory covering 3 CVEs
 before 2.4.29-1ubuntu4.27+esm11, plus listed versions
2.4.27-2ubuntu32.4.29-1ubuntu12.4.29-1ubuntu22.4.29-1ubuntu32.4.29-1ubuntu4
Show 34 moreShow less
2.4.29-1ubuntu4.12.4.29-1ubuntu4.22.4.29-1ubuntu4.32.4.29-1ubuntu4.42.4.29-1ubuntu4.52.4.29-1ubuntu4.62.4.29-1ubuntu4.72.4.29-1ubuntu4.82.4.29-1ubuntu4.102.4.29-1ubuntu4.112.4.29-1ubuntu4.122.4.29-1ubuntu4.132.4.29-1ubuntu4.142.4.29-1ubuntu4.162.4.29-1ubuntu4.172.4.29-1ubuntu4.182.4.29-1ubuntu4.192.4.29-1ubuntu4.202.4.29-1ubuntu4.212.4.29-1ubuntu4.222.4.29-1ubuntu4.232.4.29-1ubuntu4.242.4.29-1ubuntu4.252.4.29-1ubuntu4.262.4.29-1ubuntu4.272.4.29-1ubuntu4.27+esm12.4.29-1ubuntu4.27+esm22.4.29-1ubuntu4.27+esm32.4.29-1ubuntu4.27+esm42.4.29-1ubuntu4.27+esm62.4.29-1ubuntu4.27+esm72.4.29-1ubuntu4.27+esm82.4.29-1ubuntu4.27+esm92.4.29-1ubuntu4.27+esm10
2.4.29-1ubuntu4.27+esm11
apache2
Ubuntu:Pro:20.04:LTS
From an advisory covering 3 CVEs
 before 2.4.41-4ubuntu3.23+esm6, plus listed versions
2.4.41-1ubuntu12.4.41-4ubuntu12.4.41-4ubuntu22.4.41-4ubuntu32.4.41-4ubuntu3.1
Show 23 moreShow less
2.4.41-4ubuntu3.32.4.41-4ubuntu3.42.4.41-4ubuntu3.52.4.41-4ubuntu3.62.4.41-4ubuntu3.72.4.41-4ubuntu3.82.4.41-4ubuntu3.92.4.41-4ubuntu3.102.4.41-4ubuntu3.112.4.41-4ubuntu3.122.4.41-4ubuntu3.132.4.41-4ubuntu3.142.4.41-4ubuntu3.152.4.41-4ubuntu3.162.4.41-4ubuntu3.172.4.41-4ubuntu3.192.4.41-4ubuntu3.202.4.41-4ubuntu3.212.4.41-4ubuntu3.232.4.41-4ubuntu3.23+esm22.4.41-4ubuntu3.23+esm32.4.41-4ubuntu3.23+esm42.4.41-4ubuntu3.23+esm5
2.4.41-4ubuntu3.23+esm6
apache2
openSUSE:Leap 16.0
From an advisory covering 13 CVEs
 before 2.4.66-160000.3.1
2.4.66-160000.3.1
apache2-devel
openSUSE:Leap 16.0
From an advisory covering 13 CVEs
 before 2.4.66-160000.3.1
2.4.66-160000.3.1
apache2-event
openSUSE:Leap 16.0
From an advisory covering 13 CVEs
 before 2.4.66-160000.3.1
2.4.66-160000.3.1
apache2-manual
openSUSE:Leap 16.0
From an advisory covering 13 CVEs
 before 2.4.66-160000.3.1
2.4.66-160000.3.1
apache2-prefork
openSUSE:Leap 16.0
From an advisory covering 13 CVEs
 before 2.4.66-160000.3.1
2.4.66-160000.3.1
apache2-utils
openSUSE:Leap 16.0
From an advisory covering 13 CVEs
 before 2.4.66-160000.3.1
2.4.66-160000.3.1
apache2-worker
openSUSE:Leap 16.0
From an advisory covering 13 CVEs
 before 2.4.66-160000.3.1
2.4.66-160000.3.1

History

History
RecordedChangedSources
affected
facts, referencesOSV
affected
affected, aliases, published, referencesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-29170 is a medium vulnerability (CVSS 6.1) in Apache Http Server, published June 8, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.48%, the 41st percentile. Fixed in apache2 2.4.68-r0.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 3 versions and 26 references. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open