Every CVE Search/ Get API key

CVE-2026-49975

Apache HTTP Server: mod_http2 denial of service

7.5 HighPublic exploitFix available

Memory Allocation with Excessive Size Value vulnerability in Apache HTTP Server's mod_http leads to denial of service via malicious HTTP requests.

This issue affects Apache HTTP Server: from 2.4.17 through 2.4.67.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

33.0%Up 32.9 points since Jun 9, 2026
90%50%10%1%

What each source reports

CVE List Score used 7.5

Apache HTTP Server: mod_http2 denial of service

Memory Allocation with Excessive Size Value vulnerability in Apache HTTP Server's mod_http leads to denial of service via malicious HTTP requests.

This issue affects Apache HTTP Server: from 2.4.17 through 2.4.67.

Record
CVE-2026-49975
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-789, CWE-409
Updated
2026-11-02
EUVDEUVD-2026-35105 7.5

Memory Allocation with Excessive Size Value vulnerability in Apache HTTP Server's mod_http leads to denial of service via malicious HTTP requests.

This issue affects Apache HTTP Server: from 2.4.17 through 2.4.67.

Record
EUVD-2026-35105
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-262v-g5h9-6mc6 7.5

Memory Allocation with Excessive Size Value vulnerability in Apache HTTP Server's mod_http leads...

Memory Allocation with Excessive Size Value vulnerability in Apache HTTP Server's mod_http leads to denial of service via malicious HTTP requests.

This issue affects Apache HTTP Server: from 2.4.17 through 2.4.67.

Record
GHSA-262v-g5h9-6mc6
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-409, CWE-789
Updated
2026-11-02
NVD 7.5

Memory Allocation with Excessive Size Value vulnerability in Apache HTTP Server's mod_http leads to denial of service via malicious HTTP requests.

This issue affects Apache HTTP Server: from 2.4.17 through 2.4.67.

Record
CVE-2026-49975
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-789, CWE-409
Updated
2026-11-02
OSVALPINE-CVE-2026-49975 7.5

Memory Allocation with Excessive Size Value vulnerability in Apache HTTP Server's mod_http leads to denial of service via malicious HTTP requests.

This issue affects Apache HTTP Server: from 2.4.17 through 2.4.67.

Record
ALPINE-CVE-2026-49975
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVBELL-CVE-2026-49975 7.5
Record
BELL-CVE-2026-49975
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
Show 48 moreShow less
OSV 7.5

Apache HTTP Server: mod_http2 denial of service

Memory Allocation with Excessive Size Value vulnerability in Apache HTTP Server's mod_http leads to denial of service via malicious HTTP requests.

This issue affects Apache HTTP Server: from 2.4.17 through 2.4.67.

Record
CVE-2026-49975
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-789
Updated
2026-11-05
OSVDEBIAN-CVE-2026-49975 7.5

Memory Allocation with Excessive Size Value vulnerability in Apache HTTP Server's mod_http leads to denial of service via malicious HTTP requests. This issue affects Apache HTTP Server: from 2.4.17 through 2.4.67.

Record
DEBIAN-CVE-2026-49975
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2026-2611 7.5

mod_http2 security update

The mod_h2 Apache httpd module implements the HTTP2 protocol (h2+h2c) on top of libnghttp2 for httpd 2.4 servers.

Security Fix(es):

A vulnerability was found in Apache HTTP Server (Web Server) (affected version not known). It has been rated as critical.Using CWE to declare the problem leads to CWE-404. The product does not release or incorrectly releases a resource before it is made available for re-use.Impacted is availability.The exploit is available at blog.calif.io. It is declared as proof-of-concept. We expect the 0-day to have been worth approximately $5k-$25k.Applying a patch is able to eliminate this problem.(CVE-2026-49975)

Record
OESA-2026-2611
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2026-2627 7.5

nginx security update

NGINX is a free, open-source, high-performance HTTP server and reverse proxy, as well as an IMAP/POP3 proxy server.

Security Fix(es):

Memory Allocation with Excessive Size Value vulnerability in Apache HTTP Server's mod_http leads to denial of service via malicious HTTP requests.

This issue affects Apache HTTP Server: from 2.4.17 through 2.4.67.(CVE-2026-49975)

Record
OESA-2026-2627
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2026-2638 7.5

httpd security update

Apache HTTP Server is a powerful and flexible HTTP/1.1 compliant web server.

Security Fix(es):

A vulnerability was found in Apache HTTP Server (Web Server) (affected version not known). It has been rated as critical.Using CWE to declare the problem leads to CWE-404. The product does not release or incorrectly releases a resource before it is made available for re-use.Impacted is availability.The exploit is available at blog.calif.io. It is declared as proof-of-concept. We expect the 0-day to have been worth approximately $5k-$25k.Applying a patch is able to eliminate this problem.(CVE-2026-49975)

Record
OESA-2026-2638
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2026-2639 7.5

httpd security update

Apache HTTP Server is a powerful and flexible HTTP/1.1 compliant web server.

Security Fix(es):

A vulnerability was found in Apache HTTP Server (Web Server) (affected version not known). It has been rated as critical.Using CWE to declare the problem leads to CWE-404. The product does not release or incorrectly releases a resource before it is made available for re-use.Impacted is availability.The exploit is available at blog.calif.io. It is declared as proof-of-concept. We expect the 0-day to have been worth approximately $5k-$25k.Applying a patch is able to eliminate this problem.(CVE-2026-49975)

Record
OESA-2026-2639
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2026-2640 7.5

httpd security update

Apache HTTP Server is a powerful and flexible HTTP/1.1 compliant web server.

Security Fix(es):

A vulnerability was found in Apache HTTP Server (Web Server) (affected version not known). It has been rated as critical.Using CWE to declare the problem leads to CWE-404. The product does not release or incorrectly releases a resource before it is made available for re-use.Impacted is availability.The exploit is available at blog.calif.io. It is declared as proof-of-concept. We expect the 0-day to have been worth approximately $5k-$25k.Applying a patch is able to eliminate this problem.(CVE-2026-49975)

Record
OESA-2026-2640
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:25042 7.7

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Record
RHSA-2026:25042
CVSS 3.1
7.7 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:25057 7.5

Red Hat Security Advisory: mod_http2 security update

Record
RHSA-2026:25057
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:25090 7.5

Red Hat Security Advisory: httpd:2.4 security update

Record
RHSA-2026:25090
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:25225 7.5

Red Hat Security Advisory: mod_http2 security update

Record
RHSA-2026:25225
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:27200 8.2

Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.62 SP4 security update

Record
RHSA-2026:27200
CVSS 3.1
8.2 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:36373 8.2

Red Hat Security Advisory: httpd:2.4 security update

Record
RHSA-2026:36373
CVSS 3.1
8.2 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:36831 8.2

Red Hat Security Advisory: httpd:2.4 security update

Record
RHSA-2026:36831
CVSS 3.1
8.2 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:36846 8.2

Red Hat Security Advisory: httpd:2.4 security update

Record
RHSA-2026:36846
CVSS 3.1
8.2 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:50538 7.5

Red Hat Security Advisory: mod_http2 security update

Record
RHSA-2026:50538
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:50572 7.5

Red Hat Security Advisory: mod_http2 security update

Record
RHSA-2026:50572
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:55930 7.5

Red Hat Security Advisory: mod_http2 security update

Record
RHSA-2026:55930
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:55992 7.5

Red Hat Security Advisory: mod_http2 security update

Record
RHSA-2026:55992
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRLSA-2026:25057 7.5

Important: mod_http2 security update

The mod_h2 Apache httpd module implements the HTTP2 protocol (h2+h2c) on top of libnghttp2 for httpd 2.4 servers.

Security Fix(es):

  • httpd: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack (CVE-2026-49975)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:25057
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRLSA-2026:25090 7.5

Important: httpd:2.4 security update

The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server.

Security Fix(es):

  • httpd: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack (CVE-2026-49975)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:25090
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRLSA-2026:25225 7.5

Important: mod_http2 security update

The mod_h2 Apache httpd module implements the HTTP2 protocol (h2+h2c) on top of libnghttp2 for httpd 2.4 servers.

Security Fix(es):

  • httpd: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack (CVE-2026-49975)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:25225
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2026-49975 7.5

Memory Allocation with Excessive Size Value vulnerability in Apache HTTP Server's mod_http leads to denial of service via malicious HTTP requests. This issue affects Apache HTTP Server: from 2.4.17 through 2.4.67.

Record
UBUNTU-CVE-2026-49975
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVALSA-2026:25057 No score

Important: mod_http2 security update

The mod_h2 Apache httpd module implements the HTTP2 protocol (h2+h2c) on top of libnghttp2 for httpd 2.4 servers.

Security Fix(es):

  • httpd: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack (CVE-2026-49975)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:25057
Updated
2026-11-02
OSVALSA-2026:25090 No score

Important: httpd:2.4 security update

The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server.

Security Fix(es):

  • httpd: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack (CVE-2026-49975)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:25090
Updated
2026-11-02
OSVALSA-2026:25225 No score

Important: mod_http2 security update

The mod_h2 Apache httpd module implements the HTTP2 protocol (h2+h2c) on top of libnghttp2 for httpd 2.4 servers.

Security Fix(es):

  • httpd: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack (CVE-2026-49975)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:25225
Updated
2026-11-02
OSVAZL-89510 No score

CVE-2026-49975 affecting package mod_http2 2.0.29-3

Memory Allocation with Excessive Size Value vulnerability in Apache HTTP Server's mod_http leads to denial of service via malicious HTTP requests.

This issue affects Apache HTTP Server: from 2.4.17 through 2.4.67.

Record
AZL-89510
Updated
2026-11-05
OSVAZL-89550 No score

CVE-2026-49975 affecting package httpd for versions less than 2.4.68-1

Memory Allocation with Excessive Size Value vulnerability in Apache HTTP Server's mod_http leads to denial of service via malicious HTTP requests.

This issue affects Apache HTTP Server: from 2.4.17 through 2.4.67.

Record
AZL-89550
Updated
2026-11-02
OSVAZL-89760 No score

CVE-2026-49975 affecting package nginx for versions less than 1.28.3-5

Memory Allocation with Excessive Size Value vulnerability in Apache HTTP Server's mod_http leads to denial of service via malicious HTTP requests.

This issue affects Apache HTTP Server: from 2.4.17 through 2.4.67.

Record
AZL-89760
Updated
2026-11-02
OSVBIT-apache-2026-49975 No score

Apache HTTP Server: mod_http2 denial of service

Memory Allocation with Excessive Size Value vulnerability in Apache HTTP Server's mod_http leads to denial of service via malicious HTTP requests.

This issue affects Apache HTTP Server: from 2.4.17 through 2.4.67.

Record
BIT-apache-2026-49975
Updated
2026-11-02
OSVCLSA-2026-1781259837 No score

mod_http2: Fix of CVE-2026-49975

  • CVE-2026-49975: fix HTTP/2 memory exhaustion (HTTP/2 Bomb) by counting merged cookie headers against LimitRequestFields
Record
CLSA-2026-1781259837
Updated
2026-11-02
OSVCLSA-2026-1781511735 No score

nginx: Fix of CVE-2026-49975

  • CVE-2026-49975: add max_headers directive (default 1000) to cap HTTP/2 request-header memory exhaustion (HTTP/2 Bomb)
Record
CLSA-2026-1781511735
Updated
2026-11-02
OSVCLSA-2026-1782153735 No score

Fix CVE(s): CVE-2026-49975

  • SECURITY UPDATE: memory allocation with excessive size value (DoS) in mod_http2 HTTP/2 cookie header merging
    • debian/patches/CVE-2026-49975.patch: count merged cookie headers as an add so they keep counting against LimitRequestFields, and ignore duplicate empty cookie headers, in req_add_header() in modules/http2/h2_util.c; otherwise repeated HTTP/2 cookie headers merge into one growing value without tripping the LimitRequestFields guard, letting a single stream drive unbounded memory allocation. Upstream fix 35c6e405390ed361189a82acd96675401ea5947c (SVN r1934882).
    • CVE-2026-49975
Record
CLSA-2026-1782153735
Updated
2026-11-02
OSVCLSA-2026-1782317138 No score

nginx: Fix of CVE-2026-49975

  • CVE-2026-49975: add max_headers directive (default 1000) to cap HTTP/2 request-header memory exhaustion (HTTP/2 Bomb)
Record
CLSA-2026-1782317138
Updated
2026-11-02
OSVCLSA-2026-1782317575 No score

nginx: Fix of CVE-2026-49975

  • CVE-2026-49975: add max_headers directive (default 1000) to cap HTTP/2 request-header memory exhaustion (HTTP/2 Bomb)
Record
CLSA-2026-1782317575
Updated
2026-11-02
OSVCLSA-2026-1782317620 No score

nginx: Fix of CVE-2026-49975

  • CVE-2026-49975: add max_headers directive (default 1000) to cap HTTP/2 request-header memory exhaustion (HTTP/2 Bomb)
Record
CLSA-2026-1782317620
Updated
2026-11-02
OSVCLSA-2026-1783525080 No score

Fix CVE(s): CVE-2026-49975

  • SECURITY UPDATE: memory allocation with excessive size value (DoS) in mod_http2 HTTP/2 cookie header merging
    • debian/patches/CVE-2026-49975.patch: count merged cookie headers as an add so they keep counting against LimitRequestFields, and ignore duplicate empty cookie headers, in req_add_header() in modules/http2/h2_util.c; otherwise repeated HTTP/2 cookie headers merge into one growing value without tripping the LimitRequestFields guard, letting a single stream drive unbounded memory allocation. Upstream fix 35c6e405390ed361189a82acd96675401ea5947c (SVN r1934882).
    • CVE-2026-49975
Record
CLSA-2026-1783525080
Updated
2026-11-02
OSVCLSA-2026-1783632803 No score

nginx: Fix of CVE-2026-49975

  • CVE-2026-49975: add max_headers directive (default 1000) to cap HTTP/2 request-header memory exhaustion (HTTP/2 Bomb)
Record
CLSA-2026-1783632803
Updated
2026-11-02
OSVCLSA-2026-1783633126 No score

nginx: Fix of CVE-2026-49975

  • CVE-2026-49975: add max_headers directive (default 1000) to cap HTTP/2 request-header memory exhaustion (HTTP/2 Bomb)
Record
CLSA-2026-1783633126
Updated
2026-11-02
OSVCLSA-2026-1783791892 No score

nginx: Fix of CVE-2026-49975

  • CVE-2026-49975: add max_headers directive (default 1000) to cap HTTP/2 request-header memory exhaustion (HTTP/2 Bomb)
Record
CLSA-2026-1783791892
Updated
2026-11-02
OSVCLSA-2026-1783791996 No score

nginx: Fix of CVE-2026-49975

  • CVE-2026-49975: add max_headers directive (default 1000) to cap HTTP/2 request-header memory exhaustion (HTTP/2 Bomb)
Record
CLSA-2026-1783791996
Updated
2026-11-02
OSVCLSA-2026-1783792262 No score

nginx: Fix of CVE-2026-49975

  • CVE-2026-49975: add max_headers directive (default 1000) to cap HTTP/2 request-header memory exhaustion (HTTP/2 Bomb)
Record
CLSA-2026-1783792262
Updated
2026-11-02
OSVCLSA-2026-1787249757 No score

nginx: Fix of CVE-2026-49975

  • CVE-2026-49975: improve the max_headers patch to preserve binary compatibility with externally-built nginx modules
Record
CLSA-2026-1787249757
Updated
2026-11-02
OSVCLSA-2026-1787249820 No score

nginx: Fix of CVE-2026-49975

  • CVE-2026-49975: improve the max_headers patch to preserve binary compatibility with externally-built nginx modules
Record
CLSA-2026-1787249820
Updated
2026-11-02
OSVCLSA-2026-1787250962 No score

nginx: Fix of CVE-2026-49975

  • CVE-2026-49975: improve the max_headers patch to preserve binary compatibility with externally-built nginx modules
Record
CLSA-2026-1787250962
Updated
2026-11-02
OSVCLSA-2026-1787250980 No score

nginx: Fix of CVE-2026-49975

  • CVE-2026-49975: improve the max_headers patch to preserve binary compatibility with externally-built nginx modules
Record
CLSA-2026-1787250980
Updated
2026-11-02
OSVCLSA-2026-1787251196 No score

nginx: Fix of CVE-2026-49975

  • CVE-2026-49975: improve the max_headers patch to preserve binary compatibility with externally-built nginx modules
Record
CLSA-2026-1787251196
Updated
2026-11-02
OSVCLSA-2026-1787251292 No score

nginx: Fix of CVE-2026-49975

  • CVE-2026-49975: improve the max_headers patch to preserve binary compatibility with externally-built nginx modules
Record
CLSA-2026-1787251292
Updated
2026-11-02

Affected products

Show 11 moreShow less

Affected packages

Affected packages
PackageAffectedFixed
apache2
Alpine:v3.21
 before 2.4.68-r0
2.4.68-r0
apache2
Alpine:v3.22
 before 2.4.68-r0
2.4.68-r0
apache2
Alpine:v3.23
 before 2.4.68-r0
2.4.68-r0
apache2
Alpine:v3.24
 before 2.4.68-r0
2.4.68-r0
nginx
Alpine:v3.21
 before 1.26.3-r1
1.26.3-r1
nginx
Alpine:v3.22
 before 1.28.3-r3
1.28.3-r3
nginx
Alpine:v3.23
 before 1.28.3-r3
1.28.3-r3
nginx
Alpine:v3.24
 before 1.30.1-r0
1.30.1-r0
mod_http2
AlmaLinux:9
 before 2.0.26-6.el9_8.1
2.0.26-6.el9_8.1
httpd
AlmaLinux:8
 before 2.4.37-65.module_el8.10.0+4185+0955a0d7.8
2.4.37-65.module_el8.10.0+4185+0955a0d7.8
Show 290 moreShow less
Affected packages
PackageAffectedFixed
httpd
AlmaLinux:8
 before 2.4.37-65.module_el8.10.0+4190+704ad79b.8
2.4.37-65.module_el8.10.0+4190+704ad79b.8
httpd-devel
AlmaLinux:8
 before 2.4.37-65.module_el8.10.0+4185+0955a0d7.8
2.4.37-65.module_el8.10.0+4185+0955a0d7.8
httpd-devel
AlmaLinux:8
 before 2.4.37-65.module_el8.10.0+4190+704ad79b.8
2.4.37-65.module_el8.10.0+4190+704ad79b.8
httpd-filesystem
AlmaLinux:8
 before 2.4.37-65.module_el8.10.0+4185+0955a0d7.8
2.4.37-65.module_el8.10.0+4185+0955a0d7.8
httpd-manual
AlmaLinux:8
 before 2.4.37-65.module_el8.10.0+4185+0955a0d7.8
2.4.37-65.module_el8.10.0+4185+0955a0d7.8
httpd-tools
AlmaLinux:8
 before 2.4.37-65.module_el8.10.0+4185+0955a0d7.8
2.4.37-65.module_el8.10.0+4185+0955a0d7.8
httpd-tools
AlmaLinux:8
 before 2.4.37-65.module_el8.10.0+4190+704ad79b.8
2.4.37-65.module_el8.10.0+4190+704ad79b.8
mod_http2
AlmaLinux:8
 before 1.15.7-10.module_el8.10.0+4190+704ad79b.6
1.15.7-10.module_el8.10.0+4190+704ad79b.6
mod_ldap
AlmaLinux:8
 before 2.4.37-65.module_el8.10.0+4185+0955a0d7.8
2.4.37-65.module_el8.10.0+4185+0955a0d7.8
mod_ldap
AlmaLinux:8
 before 2.4.37-65.module_el8.10.0+4190+704ad79b.8
2.4.37-65.module_el8.10.0+4190+704ad79b.8
mod_md
AlmaLinux:8
 before 1:2.0.8-8.module_el8.10.0+4088+57f011c1.2
1:2.0.8-8.module_el8.10.0+4088+57f011c1.2
mod_proxy_html
AlmaLinux:8
 before 1:2.4.37-65.module_el8.10.0+4185+0955a0d7.8
1:2.4.37-65.module_el8.10.0+4185+0955a0d7.8
mod_proxy_html
AlmaLinux:8
 before 1:2.4.37-65.module_el8.10.0+4190+704ad79b.8
1:2.4.37-65.module_el8.10.0+4190+704ad79b.8
mod_session
AlmaLinux:8
 before 2.4.37-65.module_el8.10.0+4185+0955a0d7.8
2.4.37-65.module_el8.10.0+4185+0955a0d7.8
mod_session
AlmaLinux:8
 before 2.4.37-65.module_el8.10.0+4190+704ad79b.8
2.4.37-65.module_el8.10.0+4190+704ad79b.8
mod_ssl
AlmaLinux:8
 before 1:2.4.37-65.module_el8.10.0+4185+0955a0d7.8
1:2.4.37-65.module_el8.10.0+4185+0955a0d7.8
mod_ssl
AlmaLinux:8
 before 1:2.4.37-65.module_el8.10.0+4190+704ad79b.8
1:2.4.37-65.module_el8.10.0+4190+704ad79b.8
mod_http2
AlmaLinux:10
 before 2.0.29-4.el10_2.1
2.0.29-4.el10_2.1
mod_http2
Azure Linux:3
 through 2.0.29-3 None known
httpd
Azure Linux:3
 before 2.4.68-1
2.4.68-1
nginx
Azure Linux:3
 before 1.28.3-5
1.28.3-5
apache2
Alpaquita:23
 2.4.54-r2 up to 2.4.68-r0
2.4.68-r0
nginx
Alpaquita:23
 1.22.1-r0 up to 1.22.1-r7
1.22.1-r7
apache2
Alpaquita:25
 2.4.63-r0 up to 2.4.68-r0
2.4.68-r0
nginx
Alpaquita:25
 1.28.0-r3 up to 1.28.3-r5
1.28.3-r5
apache2
Alpaquita:stream
 2.4.56-r0 up to 2.4.68-r0
2.4.68-r0
nginx
Alpaquita:stream
 1.22.1-r0 up to 1.30.1-r0
1.30.1-r0
apache
Bitnami
 2.4.17 up to 2.4.68
2.4.68
mod_http2
TuxCare:AlmaLinux:9.6
 before 2.0.26-4.el9_6.1.tuxcare.els3
2.0.26-4.el9_6.1.tuxcare.els3
nginx
TuxCare:AlmaLinux:9.6
 before 2:1.20.1-22.el9_6.3.alma.2.tuxcare.els6
2:1.20.1-22.el9_6.3.alma.2.tuxcare.els6
nginx-all-modules
TuxCare:AlmaLinux:9.6
 before 2:1.20.1-22.el9_6.3.alma.2.tuxcare.els6
2:1.20.1-22.el9_6.3.alma.2.tuxcare.els6
nginx-core
TuxCare:AlmaLinux:9.6
 before 2:1.20.1-22.el9_6.3.alma.2.tuxcare.els6
2:1.20.1-22.el9_6.3.alma.2.tuxcare.els6
nginx-filesystem
TuxCare:AlmaLinux:9.6
 before 2:1.20.1-22.el9_6.3.alma.2.tuxcare.els6
2:1.20.1-22.el9_6.3.alma.2.tuxcare.els6
nginx-mod-devel
TuxCare:AlmaLinux:9.6
 before 2:1.20.1-22.el9_6.3.alma.2.tuxcare.els6
2:1.20.1-22.el9_6.3.alma.2.tuxcare.els6
nginx-mod-http-image-filter
TuxCare:AlmaLinux:9.6
 before 2:1.20.1-22.el9_6.3.alma.2.tuxcare.els6
2:1.20.1-22.el9_6.3.alma.2.tuxcare.els6
nginx-mod-http-perl
TuxCare:AlmaLinux:9.6
 before 2:1.20.1-22.el9_6.3.alma.2.tuxcare.els6
2:1.20.1-22.el9_6.3.alma.2.tuxcare.els6
nginx-mod-http-xslt-filter
TuxCare:AlmaLinux:9.6
 before 2:1.20.1-22.el9_6.3.alma.2.tuxcare.els6
2:1.20.1-22.el9_6.3.alma.2.tuxcare.els6
nginx-mod-mail
TuxCare:AlmaLinux:9.6
 before 2:1.20.1-22.el9_6.3.alma.2.tuxcare.els6
2:1.20.1-22.el9_6.3.alma.2.tuxcare.els6
nginx-mod-stream
TuxCare:AlmaLinux:9.6
 before 2:1.20.1-22.el9_6.3.alma.2.tuxcare.els6
2:1.20.1-22.el9_6.3.alma.2.tuxcare.els6
apache2
TuxCare:Ubuntu:20.04
 before 2.4.41-4ubuntu3.23+tuxcare.els7
2.4.41-4ubuntu3.23+tuxcare.els7
apache2-bin
TuxCare:Ubuntu:20.04
 before 2.4.41-4ubuntu3.23+tuxcare.els7
2.4.41-4ubuntu3.23+tuxcare.els7
apache2-data
TuxCare:Ubuntu:20.04
 before 2.4.41-4ubuntu3.23+tuxcare.els7
2.4.41-4ubuntu3.23+tuxcare.els7
apache2-dev
TuxCare:Ubuntu:20.04
 before 2.4.41-4ubuntu3.23+tuxcare.els7
2.4.41-4ubuntu3.23+tuxcare.els7
apache2-doc
TuxCare:Ubuntu:20.04
 before 2.4.41-4ubuntu3.23+tuxcare.els7
2.4.41-4ubuntu3.23+tuxcare.els7
apache2-ssl-dev
TuxCare:Ubuntu:20.04
 before 2.4.41-4ubuntu3.23+tuxcare.els7
2.4.41-4ubuntu3.23+tuxcare.els7
apache2-suexec-custom
TuxCare:Ubuntu:20.04
 before 2.4.41-4ubuntu3.23+tuxcare.els7
2.4.41-4ubuntu3.23+tuxcare.els7
apache2-suexec-pristine
TuxCare:Ubuntu:20.04
 before 2.4.41-4ubuntu3.23+tuxcare.els7
2.4.41-4ubuntu3.23+tuxcare.els7
apache2-utils
TuxCare:Ubuntu:20.04
 before 2.4.41-4ubuntu3.23+tuxcare.els7
2.4.41-4ubuntu3.23+tuxcare.els7
libapache2-mod-md
TuxCare:Ubuntu:20.04
 before 2.4.41-4ubuntu3.23+tuxcare.els7
2.4.41-4ubuntu3.23+tuxcare.els7
libapache2-mod-proxy-uwsgi
TuxCare:Ubuntu:20.04
 before 2.4.41-4ubuntu3.23+tuxcare.els7
2.4.41-4ubuntu3.23+tuxcare.els7
nginx
TuxCare:CentOS:8.4
 before 1:1.14.1-9.module_el8.4.0+2426+f8b5767a.tuxcare.els9
1:1.14.1-9.module_el8.4.0+2426+f8b5767a.tuxcare.els9
nginx-all-modules
TuxCare:CentOS:8.4
 before 1:1.14.1-9.module_el8.4.0+2426+f8b5767a.tuxcare.els9
1:1.14.1-9.module_el8.4.0+2426+f8b5767a.tuxcare.els9
nginx-filesystem
TuxCare:CentOS:8.4
 before 1:1.14.1-9.module_el8.4.0+2426+f8b5767a.tuxcare.els9
1:1.14.1-9.module_el8.4.0+2426+f8b5767a.tuxcare.els9
nginx-mod-http-image-filter
TuxCare:CentOS:8.4
 before 1:1.14.1-9.module_el8.4.0+2426+f8b5767a.tuxcare.els9
1:1.14.1-9.module_el8.4.0+2426+f8b5767a.tuxcare.els9
nginx-mod-http-perl
TuxCare:CentOS:8.4
 before 1:1.14.1-9.module_el8.4.0+2426+f8b5767a.tuxcare.els9
1:1.14.1-9.module_el8.4.0+2426+f8b5767a.tuxcare.els9
nginx-mod-http-xslt-filter
TuxCare:CentOS:8.4
 before 1:1.14.1-9.module_el8.4.0+2426+f8b5767a.tuxcare.els9
1:1.14.1-9.module_el8.4.0+2426+f8b5767a.tuxcare.els9
nginx-mod-mail
TuxCare:CentOS:8.4
 before 1:1.14.1-9.module_el8.4.0+2426+f8b5767a.tuxcare.els9
1:1.14.1-9.module_el8.4.0+2426+f8b5767a.tuxcare.els9
nginx-mod-stream
TuxCare:CentOS:8.4
 before 1:1.14.1-9.module_el8.4.0+2426+f8b5767a.tuxcare.els9
1:1.14.1-9.module_el8.4.0+2426+f8b5767a.tuxcare.els9
nginx
TuxCare:CentOS:8.5
 before 1:1.14.1-9.module_el8.5.0+2427+fef2dc31.tuxcare.els9
1:1.14.1-9.module_el8.5.0+2427+fef2dc31.tuxcare.els9
nginx-all-modules
TuxCare:CentOS:8.5
 before 1:1.14.1-9.module_el8.5.0+2427+fef2dc31.tuxcare.els9
1:1.14.1-9.module_el8.5.0+2427+fef2dc31.tuxcare.els9
nginx-filesystem
TuxCare:CentOS:8.5
 before 1:1.14.1-9.module_el8.5.0+2427+fef2dc31.tuxcare.els9
1:1.14.1-9.module_el8.5.0+2427+fef2dc31.tuxcare.els9
nginx-mod-http-image-filter
TuxCare:CentOS:8.5
 before 1:1.14.1-9.module_el8.5.0+2427+fef2dc31.tuxcare.els9
1:1.14.1-9.module_el8.5.0+2427+fef2dc31.tuxcare.els9
nginx-mod-http-perl
TuxCare:CentOS:8.5
 before 1:1.14.1-9.module_el8.5.0+2427+fef2dc31.tuxcare.els9
1:1.14.1-9.module_el8.5.0+2427+fef2dc31.tuxcare.els9
nginx-mod-http-xslt-filter
TuxCare:CentOS:8.5
 before 1:1.14.1-9.module_el8.5.0+2427+fef2dc31.tuxcare.els9
1:1.14.1-9.module_el8.5.0+2427+fef2dc31.tuxcare.els9
nginx-mod-mail
TuxCare:CentOS:8.5
 before 1:1.14.1-9.module_el8.5.0+2427+fef2dc31.tuxcare.els9
1:1.14.1-9.module_el8.5.0+2427+fef2dc31.tuxcare.els9
nginx-mod-stream
TuxCare:CentOS:8.5
 before 1:1.14.1-9.module_el8.5.0+2427+fef2dc31.tuxcare.els9
1:1.14.1-9.module_el8.5.0+2427+fef2dc31.tuxcare.els9
nginx
TuxCare:CentOS-Stream:8
 before 1:1.14.1-9.module_el8+2428+c4299125.tuxcare.els9
1:1.14.1-9.module_el8+2428+c4299125.tuxcare.els9
nginx-all-modules
TuxCare:CentOS-Stream:8
 before 1:1.14.1-9.module_el8+2428+c4299125.tuxcare.els9
1:1.14.1-9.module_el8+2428+c4299125.tuxcare.els9
nginx-filesystem
TuxCare:CentOS-Stream:8
 before 1:1.14.1-9.module_el8+2428+c4299125.tuxcare.els9
1:1.14.1-9.module_el8+2428+c4299125.tuxcare.els9
nginx-mod-http-image-filter
TuxCare:CentOS-Stream:8
 before 1:1.14.1-9.module_el8+2428+c4299125.tuxcare.els9
1:1.14.1-9.module_el8+2428+c4299125.tuxcare.els9
nginx-mod-http-perl
TuxCare:CentOS-Stream:8
 before 1:1.14.1-9.module_el8+2428+c4299125.tuxcare.els9
1:1.14.1-9.module_el8+2428+c4299125.tuxcare.els9
nginx-mod-http-xslt-filter
TuxCare:CentOS-Stream:8
 before 1:1.14.1-9.module_el8+2428+c4299125.tuxcare.els9
1:1.14.1-9.module_el8+2428+c4299125.tuxcare.els9
nginx-mod-mail
TuxCare:CentOS-Stream:8
 before 1:1.14.1-9.module_el8+2428+c4299125.tuxcare.els9
1:1.14.1-9.module_el8+2428+c4299125.tuxcare.els9
nginx-mod-stream
TuxCare:CentOS-Stream:8
 before 1:1.14.1-9.module_el8+2428+c4299125.tuxcare.els9
1:1.14.1-9.module_el8+2428+c4299125.tuxcare.els9
apache2
TuxCare:Debian:10
 before 2.4.59-1~deb10u1+tuxcare.els11
2.4.59-1~deb10u1+tuxcare.els11
apache2-bin
TuxCare:Debian:10
 before 2.4.59-1~deb10u1+tuxcare.els11
2.4.59-1~deb10u1+tuxcare.els11
apache2-data
TuxCare:Debian:10
 before 2.4.59-1~deb10u1+tuxcare.els11
2.4.59-1~deb10u1+tuxcare.els11
apache2-dev
TuxCare:Debian:10
 before 2.4.59-1~deb10u1+tuxcare.els11
2.4.59-1~deb10u1+tuxcare.els11
apache2-doc
TuxCare:Debian:10
 before 2.4.59-1~deb10u1+tuxcare.els11
2.4.59-1~deb10u1+tuxcare.els11
apache2-ssl-dev
TuxCare:Debian:10
 before 2.4.59-1~deb10u1+tuxcare.els11
2.4.59-1~deb10u1+tuxcare.els11
apache2-suexec-custom
TuxCare:Debian:10
 before 2.4.59-1~deb10u1+tuxcare.els11
2.4.59-1~deb10u1+tuxcare.els11
apache2-suexec-pristine
TuxCare:Debian:10
 before 2.4.59-1~deb10u1+tuxcare.els11
2.4.59-1~deb10u1+tuxcare.els11
apache2-utils
TuxCare:Debian:10
 before 2.4.59-1~deb10u1+tuxcare.els11
2.4.59-1~deb10u1+tuxcare.els11
libapache2-mod-md
TuxCare:Debian:10
 before 2.4.59-1~deb10u1+tuxcare.els11
2.4.59-1~deb10u1+tuxcare.els11
libapache2-mod-proxy-uwsgi
TuxCare:Debian:10
 before 2.4.59-1~deb10u1+tuxcare.els11
2.4.59-1~deb10u1+tuxcare.els11
nginx
TuxCare:OracleLinux:6
 before 1.10.3-4.el6.tuxcare.els10
1.10.3-4.el6.tuxcare.els10
nginx-all-modules
TuxCare:OracleLinux:6
 before 1.10.3-4.el6.tuxcare.els10
1.10.3-4.el6.tuxcare.els10
nginx-filesystem
TuxCare:OracleLinux:6
 before 1.10.3-4.el6.tuxcare.els10
1.10.3-4.el6.tuxcare.els10
nginx-mod-http-geoip
TuxCare:OracleLinux:6
 before 1.10.3-4.el6.tuxcare.els10
1.10.3-4.el6.tuxcare.els10
nginx-mod-http-image-filter
TuxCare:OracleLinux:6
 before 1.10.3-4.el6.tuxcare.els10
1.10.3-4.el6.tuxcare.els10
nginx-mod-http-perl
TuxCare:OracleLinux:6
 before 1.10.3-4.el6.tuxcare.els10
1.10.3-4.el6.tuxcare.els10
nginx-mod-http-xslt-filter
TuxCare:OracleLinux:6
 before 1.10.3-4.el6.tuxcare.els10
1.10.3-4.el6.tuxcare.els10
nginx-mod-mail
TuxCare:OracleLinux:6
 before 1.10.3-4.el6.tuxcare.els10
1.10.3-4.el6.tuxcare.els10
nginx-mod-stream
TuxCare:OracleLinux:6
 before 1.10.3-4.el6.tuxcare.els10
1.10.3-4.el6.tuxcare.els10
nginx
TuxCare:CentOS:6
 before 1.10.3-4.el6.tuxcare.els10
1.10.3-4.el6.tuxcare.els10
nginx-all-modules
TuxCare:CentOS:6
 before 1.10.3-4.el6.tuxcare.els10
1.10.3-4.el6.tuxcare.els10
nginx-filesystem
TuxCare:CentOS:6
 before 1.10.3-4.el6.tuxcare.els10
1.10.3-4.el6.tuxcare.els10
nginx-mod-http-geoip
TuxCare:CentOS:6
 before 1.10.3-4.el6.tuxcare.els10
1.10.3-4.el6.tuxcare.els10
nginx-mod-http-image-filter
TuxCare:CentOS:6
 before 1.10.3-4.el6.tuxcare.els10
1.10.3-4.el6.tuxcare.els10
nginx-mod-http-perl
TuxCare:CentOS:6
 before 1.10.3-4.el6.tuxcare.els10
1.10.3-4.el6.tuxcare.els10
nginx-mod-http-xslt-filter
TuxCare:CentOS:6
 before 1.10.3-4.el6.tuxcare.els10
1.10.3-4.el6.tuxcare.els10
nginx-mod-mail
TuxCare:CentOS:6
 before 1.10.3-4.el6.tuxcare.els10
1.10.3-4.el6.tuxcare.els10
nginx-mod-stream
TuxCare:CentOS:6
 before 1.10.3-4.el6.tuxcare.els10
1.10.3-4.el6.tuxcare.els10
nginx
TuxCare:OracleLinux:7
 before 1:1.20.1-10.el7.tuxcare.els5
1:1.20.1-10.el7.tuxcare.els5
apache2
Debian:12
 before 2.4.67-1~deb12u3, plus listed versions
2.4.57-22.4.57-32.4.58-12.4.59-12.4.59-1~deb10u1
Show 42 moreShow less
2.4.59-1~deb11u12.4.59-1~deb12u12.4.59-22.4.60-12.4.61-12.4.61-1~deb11u12.4.61-1~deb12u12.4.62-12.4.62-1~deb11u12.4.62-1~deb11u22.4.62-1~deb12u12.4.62-1~deb12u22.4.62-22.4.62-32.4.62-42.4.62-52.4.62-62.4.63-12.4.64-12.4.65-12.4.65-1~deb11u12.4.65-1~deb12u12.4.65-22.4.65-32.4.66-12.4.66-1~deb11u12.4.66-1~deb12u12.4.66-1~deb12u22.4.66-1~deb13u12.4.66-1~deb13u22.4.66-22.4.66-32.4.66-42.4.66-52.4.66-62.4.66-72.4.66-82.4.67-1~deb11u12.4.67-1~deb11u22.4.67-1~deb11u32.4.67-1~deb12u12.4.67-1~deb12u2
2.4.67-1~deb12u3
apache2
Debian:13
 before 2.4.67-1~deb13u3, plus listed versions
2.4.65-22.4.65-32.4.66-12.4.66-1~deb11u12.4.66-1~deb12u1
Show 18 moreShow less
2.4.66-1~deb12u22.4.66-1~deb13u12.4.66-1~deb13u22.4.66-22.4.66-32.4.66-42.4.66-52.4.66-62.4.66-72.4.66-82.4.67-1~deb11u12.4.67-1~deb11u22.4.67-1~deb11u32.4.67-1~deb12u12.4.67-1~deb12u22.4.67-1~deb12u32.4.67-1~deb13u12.4.67-1~deb13u2
2.4.67-1~deb13u3
apache2
Debian:14
 before 2.4.67-2, plus listed versions
2.4.65-22.4.65-32.4.66-12.4.66-1~deb11u12.4.66-1~deb12u1
Show 20 moreShow less
2.4.66-1~deb12u22.4.66-1~deb13u12.4.66-1~deb13u22.4.66-22.4.66-32.4.66-42.4.66-52.4.66-62.4.66-72.4.66-82.4.67-12.4.67-1~deb11u12.4.67-1~deb11u22.4.67-1~deb11u32.4.67-1~deb12u12.4.67-1~deb12u22.4.67-1~deb12u32.4.67-1~deb13u12.4.67-1~deb13u22.4.67-1~deb13u3
2.4.67-2
apache
Mageia:10
From an advisory covering 13 CVEs
 before 2.4.68-1.mga10
2.4.68-1.mga10
apache
Mageia:9
From an advisory covering 13 CVEs
 before 2.4.68-1.mga9
2.4.68-1.mga9
mod_http2
openEuler:24.03-LTS-SP1
 before 2.0.25-5.oe2403sp1
2.0.25-5.oe2403sp1
mod_http2
openEuler:24.03-LTS-SP3
 before 2.0.25-5.oe2403sp3
2.0.25-5.oe2403sp3
mod_http2
openEuler:20.03-LTS-SP4
 before 1.15.13-4.oe2003sp4
1.15.13-4.oe2003sp4
mod_http2
openEuler:22.03-LTS-SP4
 before 1.15.25-5.oe2203sp4
1.15.25-5.oe2203sp4
nginx
openEuler:24.03-LTS-SP1
 before 1.24.0-12.oe2403sp1
1.24.0-12.oe2403sp1
nginx
openEuler:24.03-LTS-SP3
 before 1.24.0-12.oe2403sp3
1.24.0-12.oe2403sp3
nginx
openEuler:20.03-LTS-SP4
 before 1.21.5-14.oe2003sp4
1.21.5-14.oe2003sp4
nginx
openEuler:22.03-LTS-SP4
 before 1.21.5-16.oe2203sp4
1.21.5-16.oe2203sp4
httpd
openEuler:24.03-LTS-SP3
 before 2.4.58-16.oe2403sp3
2.4.58-16.oe2403sp3
httpd
openEuler:22.03-LTS-SP4
 before 2.4.51-31.oe2203sp4
2.4.51-31.oe2203sp4
httpd
openEuler:24.03-LTS-SP1
 before 2.4.58-16.oe2403sp1
2.4.58-16.oe2403sp1
httpd
Red Hat:hummingbird:1
From an advisory covering 13 CVEs
 before 0:2.4.68-1.hum1
0:2.4.68-1.hum1
httpd-core
Red Hat:hummingbird:1
From an advisory covering 13 CVEs
 before 0:2.4.68-1.hum1
0:2.4.68-1.hum1
httpd-devel
Red Hat:hummingbird:1
From an advisory covering 13 CVEs
 before 0:2.4.68-1.hum1
0:2.4.68-1.hum1
httpd-filesystem
Red Hat:hummingbird:1
From an advisory covering 13 CVEs
 before 0:2.4.68-1.hum1
0:2.4.68-1.hum1
httpd-manual
Red Hat:hummingbird:1
From an advisory covering 13 CVEs
 before 0:2.4.68-1.hum1
0:2.4.68-1.hum1
httpd-tools
Red Hat:hummingbird:1
From an advisory covering 13 CVEs
 before 0:2.4.68-1.hum1
0:2.4.68-1.hum1
mod_http2
Red Hat:enterprise_linux:9::appstream
 before 0:2.0.26-6.el9_8.1
0:2.0.26-6.el9_8.1
mod_http2-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 0:2.0.26-6.el9_8.1
0:2.0.26-6.el9_8.1
mod_http2-debugsource
Red Hat:enterprise_linux:9::appstream
 before 0:2.0.26-6.el9_8.1
0:2.0.26-6.el9_8.1
httpd
Red Hat:enterprise_linux:8::appstream
 before 0:2.4.37-65.module+el8.10.0+24281+ea10630c.8
0:2.4.37-65.module+el8.10.0+24281+ea10630c.8
httpd-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:2.4.37-65.module+el8.10.0+24281+ea10630c.8
0:2.4.37-65.module+el8.10.0+24281+ea10630c.8
httpd-debugsource
Red Hat:enterprise_linux:8::appstream
 before 0:2.4.37-65.module+el8.10.0+24281+ea10630c.8
0:2.4.37-65.module+el8.10.0+24281+ea10630c.8
httpd-devel
Red Hat:enterprise_linux:8::appstream
 before 0:2.4.37-65.module+el8.10.0+24281+ea10630c.8
0:2.4.37-65.module+el8.10.0+24281+ea10630c.8
httpd-filesystem
Red Hat:enterprise_linux:8::appstream
 before 0:2.4.37-65.module+el8.10.0+24281+ea10630c.8
0:2.4.37-65.module+el8.10.0+24281+ea10630c.8
httpd-manual
Red Hat:enterprise_linux:8::appstream
 before 0:2.4.37-65.module+el8.10.0+24281+ea10630c.8
0:2.4.37-65.module+el8.10.0+24281+ea10630c.8
httpd-tools
Red Hat:enterprise_linux:8::appstream
 before 0:2.4.37-65.module+el8.10.0+24281+ea10630c.8
0:2.4.37-65.module+el8.10.0+24281+ea10630c.8
httpd-tools-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:2.4.37-65.module+el8.10.0+24281+ea10630c.8
0:2.4.37-65.module+el8.10.0+24281+ea10630c.8
mod_http2
Red Hat:enterprise_linux:8::appstream
 before 0:1.15.7-10.module+el8.10.0+24368+ad388a0c.6
0:1.15.7-10.module+el8.10.0+24368+ad388a0c.6
mod_http2-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:1.15.7-10.module+el8.10.0+24368+ad388a0c.6
0:1.15.7-10.module+el8.10.0+24368+ad388a0c.6
mod_http2-debugsource
Red Hat:enterprise_linux:8::appstream
 before 0:1.15.7-10.module+el8.10.0+24368+ad388a0c.6
0:1.15.7-10.module+el8.10.0+24368+ad388a0c.6
mod_ldap
Red Hat:enterprise_linux:8::appstream
 before 0:2.4.37-65.module+el8.10.0+24281+ea10630c.8
0:2.4.37-65.module+el8.10.0+24281+ea10630c.8
mod_ldap-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:2.4.37-65.module+el8.10.0+24281+ea10630c.8
0:2.4.37-65.module+el8.10.0+24281+ea10630c.8
mod_md
Red Hat:enterprise_linux:8::appstream
 before 1:2.0.8-8.module+el8.10.0+23815+1b5e1c66.2
1:2.0.8-8.module+el8.10.0+23815+1b5e1c66.2
mod_md-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 1:2.0.8-8.module+el8.10.0+23815+1b5e1c66.2
1:2.0.8-8.module+el8.10.0+23815+1b5e1c66.2
mod_md-debugsource
Red Hat:enterprise_linux:8::appstream
 before 1:2.0.8-8.module+el8.10.0+23815+1b5e1c66.2
1:2.0.8-8.module+el8.10.0+23815+1b5e1c66.2
mod_proxy_html
Red Hat:enterprise_linux:8::appstream
 before 1:2.4.37-65.module+el8.10.0+24281+ea10630c.8
1:2.4.37-65.module+el8.10.0+24281+ea10630c.8
mod_proxy_html-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 1:2.4.37-65.module+el8.10.0+24281+ea10630c.8
1:2.4.37-65.module+el8.10.0+24281+ea10630c.8
mod_session
Red Hat:enterprise_linux:8::appstream
 before 0:2.4.37-65.module+el8.10.0+24281+ea10630c.8
0:2.4.37-65.module+el8.10.0+24281+ea10630c.8
mod_session-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:2.4.37-65.module+el8.10.0+24281+ea10630c.8
0:2.4.37-65.module+el8.10.0+24281+ea10630c.8
mod_ssl
Red Hat:enterprise_linux:8::appstream
 before 1:2.4.37-65.module+el8.10.0+24281+ea10630c.8
1:2.4.37-65.module+el8.10.0+24281+ea10630c.8
mod_ssl-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 1:2.4.37-65.module+el8.10.0+24281+ea10630c.8
1:2.4.37-65.module+el8.10.0+24281+ea10630c.8
mod_http2
Red Hat:enterprise_linux:10.2
 before 0:2.0.29-4.el10_2.1
0:2.0.29-4.el10_2.1
mod_http2-debuginfo
Red Hat:enterprise_linux:10.2
 before 0:2.0.29-4.el10_2.1
0:2.0.29-4.el10_2.1
mod_http2-debugsource
Red Hat:enterprise_linux:10.2
 before 0:2.0.29-4.el10_2.1
0:2.0.29-4.el10_2.1
jbcs-httpd24-httpd
Red Hat:jboss_core_services:1::el7
From an advisory covering 10 CVEs
 before 0:2.4.62-13.el7jbcs
0:2.4.62-13.el7jbcs
jbcs-httpd24-httpd-debuginfo
Red Hat:jboss_core_services:1::el7
From an advisory covering 10 CVEs
 before 0:2.4.62-13.el7jbcs
0:2.4.62-13.el7jbcs
jbcs-httpd24-httpd-devel
Red Hat:jboss_core_services:1::el7
From an advisory covering 10 CVEs
 before 0:2.4.62-13.el7jbcs
0:2.4.62-13.el7jbcs
jbcs-httpd24-httpd-manual
Red Hat:jboss_core_services:1::el7
From an advisory covering 10 CVEs
 before 0:2.4.62-13.el7jbcs
0:2.4.62-13.el7jbcs
jbcs-httpd24-httpd-selinux
Red Hat:jboss_core_services:1::el7
From an advisory covering 10 CVEs
 before 0:2.4.62-13.el7jbcs
0:2.4.62-13.el7jbcs
jbcs-httpd24-httpd-tools
Red Hat:jboss_core_services:1::el7
From an advisory covering 10 CVEs
 before 0:2.4.62-13.el7jbcs
0:2.4.62-13.el7jbcs
jbcs-httpd24-mod_http2
Red Hat:jboss_core_services:1::el7
From an advisory covering 10 CVEs
 before 0:2.0.29-10.el7jbcs
0:2.0.29-10.el7jbcs
jbcs-httpd24-mod_http2-debuginfo
Red Hat:jboss_core_services:1::el7
From an advisory covering 10 CVEs
 before 0:2.0.29-10.el7jbcs
0:2.0.29-10.el7jbcs
jbcs-httpd24-mod_ldap
Red Hat:jboss_core_services:1::el7
From an advisory covering 10 CVEs
 before 0:2.4.62-13.el7jbcs
0:2.4.62-13.el7jbcs
jbcs-httpd24-mod_proxy_html
Red Hat:jboss_core_services:1::el7
From an advisory covering 10 CVEs
 before 1:2.4.62-13.el7jbcs
1:2.4.62-13.el7jbcs
jbcs-httpd24-mod_session
Red Hat:jboss_core_services:1::el7
From an advisory covering 10 CVEs
 before 0:2.4.62-13.el7jbcs
0:2.4.62-13.el7jbcs
jbcs-httpd24-mod_ssl
Red Hat:jboss_core_services:1::el7
From an advisory covering 10 CVEs
 before 1:2.4.62-13.el7jbcs
1:2.4.62-13.el7jbcs
jbcs-httpd24-httpd
Red Hat:jboss_core_services:1::el8
From an advisory covering 10 CVEs
 before 0:2.4.62-13.el8jbcs
0:2.4.62-13.el8jbcs
jbcs-httpd24-httpd-debuginfo
Red Hat:jboss_core_services:1::el8
From an advisory covering 10 CVEs
 before 0:2.4.62-13.el8jbcs
0:2.4.62-13.el8jbcs
jbcs-httpd24-httpd-devel
Red Hat:jboss_core_services:1::el8
From an advisory covering 10 CVEs
 before 0:2.4.62-13.el8jbcs
0:2.4.62-13.el8jbcs
jbcs-httpd24-httpd-manual
Red Hat:jboss_core_services:1::el8
From an advisory covering 10 CVEs
 before 0:2.4.62-13.el8jbcs
0:2.4.62-13.el8jbcs
jbcs-httpd24-httpd-selinux
Red Hat:jboss_core_services:1::el8
From an advisory covering 10 CVEs
 before 0:2.4.62-13.el8jbcs
0:2.4.62-13.el8jbcs
jbcs-httpd24-httpd-tools
Red Hat:jboss_core_services:1::el8
From an advisory covering 10 CVEs
 before 0:2.4.62-13.el8jbcs
0:2.4.62-13.el8jbcs
jbcs-httpd24-httpd-tools-debuginfo
Red Hat:jboss_core_services:1::el8
From an advisory covering 10 CVEs
 before 0:2.4.62-13.el8jbcs
0:2.4.62-13.el8jbcs
jbcs-httpd24-mod_http2
Red Hat:jboss_core_services:1::el8
From an advisory covering 10 CVEs
 before 0:2.0.29-10.el8jbcs
0:2.0.29-10.el8jbcs
jbcs-httpd24-mod_http2-debuginfo
Red Hat:jboss_core_services:1::el8
From an advisory covering 10 CVEs
 before 0:2.0.29-10.el8jbcs
0:2.0.29-10.el8jbcs
jbcs-httpd24-mod_ldap
Red Hat:jboss_core_services:1::el8
From an advisory covering 10 CVEs
 before 0:2.4.62-13.el8jbcs
0:2.4.62-13.el8jbcs
jbcs-httpd24-mod_ldap-debuginfo
Red Hat:jboss_core_services:1::el8
From an advisory covering 10 CVEs
 before 0:2.4.62-13.el8jbcs
0:2.4.62-13.el8jbcs
jbcs-httpd24-mod_proxy_html
Red Hat:jboss_core_services:1::el8
From an advisory covering 10 CVEs
 before 1:2.4.62-13.el8jbcs
1:2.4.62-13.el8jbcs
jbcs-httpd24-mod_proxy_html-debuginfo
Red Hat:jboss_core_services:1::el8
From an advisory covering 10 CVEs
 before 1:2.4.62-13.el8jbcs
1:2.4.62-13.el8jbcs
jbcs-httpd24-mod_session
Red Hat:jboss_core_services:1::el8
From an advisory covering 10 CVEs
 before 0:2.4.62-13.el8jbcs
0:2.4.62-13.el8jbcs
jbcs-httpd24-mod_session-debuginfo
Red Hat:jboss_core_services:1::el8
From an advisory covering 10 CVEs
 before 0:2.4.62-13.el8jbcs
0:2.4.62-13.el8jbcs
jbcs-httpd24-mod_ssl
Red Hat:jboss_core_services:1::el8
From an advisory covering 10 CVEs
 before 1:2.4.62-13.el8jbcs
1:2.4.62-13.el8jbcs
jbcs-httpd24-mod_ssl-debuginfo
Red Hat:jboss_core_services:1::el8
From an advisory covering 10 CVEs
 before 1:2.4.62-13.el8jbcs
1:2.4.62-13.el8jbcs
jbcs-httpd24-nghttp2
Red Hat:jboss_core_services:1::el7
From an advisory covering 10 CVEs
 before 0:1.64.0-3.el7jbcs
0:1.64.0-3.el7jbcs
jbcs-httpd24-nghttp2-debuginfo
Red Hat:jboss_core_services:1::el7
From an advisory covering 10 CVEs
 before 0:1.64.0-3.el7jbcs
0:1.64.0-3.el7jbcs
jbcs-httpd24-nghttp2-devel
Red Hat:jboss_core_services:1::el7
From an advisory covering 10 CVEs
 before 0:1.64.0-3.el7jbcs
0:1.64.0-3.el7jbcs
jbcs-httpd24-nghttp2
Red Hat:jboss_core_services:1::el8
From an advisory covering 10 CVEs
 before 0:1.64.0-3.el8jbcs
0:1.64.0-3.el8jbcs
jbcs-httpd24-nghttp2-debuginfo
Red Hat:jboss_core_services:1::el8
From an advisory covering 10 CVEs
 before 0:1.64.0-3.el8jbcs
0:1.64.0-3.el8jbcs
jbcs-httpd24-nghttp2-devel
Red Hat:jboss_core_services:1::el8
From an advisory covering 10 CVEs
 before 0:1.64.0-3.el8jbcs
0:1.64.0-3.el8jbcs
jbcs-httpd24-mod_md
Red Hat:jboss_core_services:1::el7
From an advisory covering 10 CVEs
 before 1:2.4.28-16.el7jbcs
1:2.4.28-16.el7jbcs
jbcs-httpd24-mod_md-debuginfo
Red Hat:jboss_core_services:1::el7
From an advisory covering 10 CVEs
 before 1:2.4.28-16.el7jbcs
1:2.4.28-16.el7jbcs
jbcs-httpd24-mod_md
Red Hat:jboss_core_services:1::el8
From an advisory covering 10 CVEs
 before 1:2.4.28-16.el8jbcs
1:2.4.28-16.el8jbcs
jbcs-httpd24-mod_md-debuginfo
Red Hat:jboss_core_services:1::el8
From an advisory covering 10 CVEs
 before 1:2.4.28-16.el8jbcs
1:2.4.28-16.el8jbcs
httpd
Red Hat:rhel_e4s:8.8::appstream
From an advisory covering 7 CVEs
 before 0:2.4.37-56.module+el8.8.0+24497+e470c0e2.12
0:2.4.37-56.module+el8.8.0+24497+e470c0e2.12
httpd-debuginfo
Red Hat:rhel_e4s:8.8::appstream
From an advisory covering 7 CVEs
 before 0:2.4.37-56.module+el8.8.0+24497+e470c0e2.12
0:2.4.37-56.module+el8.8.0+24497+e470c0e2.12
httpd-debugsource
Red Hat:rhel_e4s:8.8::appstream
From an advisory covering 7 CVEs
 before 0:2.4.37-56.module+el8.8.0+24497+e470c0e2.12
0:2.4.37-56.module+el8.8.0+24497+e470c0e2.12
mod_http2
Rocky Linux:9
 before 0:2.0.26-6.el9_8.1
0:2.0.26-6.el9_8.1
httpd
Rocky Linux:8
 before 0:2.4.37-65.module+el8.10.0+40045+6ce8579b.6
0:2.4.37-65.module+el8.10.0+40045+6ce8579b.6
httpd
Rocky Linux:8
 before 0:2.4.37-65.module+el8.10.0+40197+0231e209.8
0:2.4.37-65.module+el8.10.0+40197+0231e209.8
httpd
Rocky Linux:8
 before 0:2.4.37-65.module+el8.10.0+40053+5a18018e.7
0:2.4.37-65.module+el8.10.0+40053+5a18018e.7
httpd
Rocky Linux:8
 before 0:2.4.37-65.module+el8.10.0+1840+b070a976.1
0:2.4.37-65.module+el8.10.0+1840+b070a976.1
httpd
Rocky Linux:8
 before 0:2.4.37-65.module+el8.10.0+1842+4a9649e8.2
0:2.4.37-65.module+el8.10.0+1842+4a9649e8.2
httpd
Rocky Linux:8
 before 0:2.4.37-65.module+el8.10.0+2061+8d03fdec.5
0:2.4.37-65.module+el8.10.0+2061+8d03fdec.5
httpd
Rocky Linux:8
 before 0:2.4.37-65.module+el8.10.0+1984+1bed3124.4
0:2.4.37-65.module+el8.10.0+1984+1bed3124.4
httpd
Rocky Linux:8
 before 0:2.4.37-65.module+el8.10.0+1938+3b7755d4.3
0:2.4.37-65.module+el8.10.0+1938+3b7755d4.3
httpd
Rocky Linux:8
 before 0:2.4.37-65.module+el8.10.0+1830+22f0c9e0
0:2.4.37-65.module+el8.10.0+1830+22f0c9e0
mod_http2
Rocky Linux:8
 before 0:1.15.7-10.module+el8.10.0+40197+0231e209.5
0:1.15.7-10.module+el8.10.0+40197+0231e209.5
mod_http2
Rocky Linux:8
 before 0:1.15.7-10.module+el8.10.0+2061+8d03fdec.4
0:1.15.7-10.module+el8.10.0+2061+8d03fdec.4
mod_http2
Rocky Linux:8
 before 0:1.15.7-10.module+el8.10.0+1830+22f0c9e0
0:1.15.7-10.module+el8.10.0+1830+22f0c9e0
mod_http2
Rocky Linux:8
 before 0:1.15.7-10.module+el8.10.0+1938+3b7755d4.3
0:1.15.7-10.module+el8.10.0+1938+3b7755d4.3
mod_http2
Rocky Linux:8
 before 0:1.15.7-10.module+el8.10.0+1883+38ed6c58.1
0:1.15.7-10.module+el8.10.0+1883+38ed6c58.1
mod_http2
Rocky Linux:8
 before 0:1.15.7-10.module+el8.10.0+1775+6b057638
0:1.15.7-10.module+el8.10.0+1775+6b057638
mod_md
Rocky Linux:8
 before 1:2.0.8-8.module+el8.10.0+40053+5a18018e.2
1:2.0.8-8.module+el8.10.0+40053+5a18018e.2
mod_md
Rocky Linux:8
 before 1:2.0.8-8.module+el8.9.0+1370+89cc8ad5
1:2.0.8-8.module+el8.9.0+1370+89cc8ad5
mod_http2
Rocky Linux:10
 before 0:2.0.29-4.el10_2.1
0:2.0.29-4.el10_2.1
apache2
SUSE:Linux Enterprise Server 16.0
From an advisory covering 13 CVEs
 before 2.4.66-160000.3.1
2.4.66-160000.3.1
apache2-devel
SUSE:Linux Enterprise Server 16.0
From an advisory covering 13 CVEs
 before 2.4.66-160000.3.1
2.4.66-160000.3.1
apache2-event
SUSE:Linux Enterprise Server 16.0
From an advisory covering 13 CVEs
 before 2.4.66-160000.3.1
2.4.66-160000.3.1
apache2-manual
SUSE:Linux Enterprise Server 16.0
From an advisory covering 13 CVEs
 before 2.4.66-160000.3.1
2.4.66-160000.3.1
apache2-prefork
SUSE:Linux Enterprise Server 16.0
From an advisory covering 13 CVEs
 before 2.4.66-160000.3.1
2.4.66-160000.3.1
apache2-utils
SUSE:Linux Enterprise Server 16.0
From an advisory covering 13 CVEs
 before 2.4.66-160000.3.1
2.4.66-160000.3.1
apache2-worker
SUSE:Linux Enterprise Server 16.0
From an advisory covering 13 CVEs
 before 2.4.66-160000.3.1
2.4.66-160000.3.1
apache2
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 13 CVEs
 before 2.4.66-160000.3.1
2.4.66-160000.3.1
apache2-devel
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 13 CVEs
 before 2.4.66-160000.3.1
2.4.66-160000.3.1
apache2-event
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 13 CVEs
 before 2.4.66-160000.3.1
2.4.66-160000.3.1
apache2-manual
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 13 CVEs
 before 2.4.66-160000.3.1
2.4.66-160000.3.1
apache2-prefork
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 13 CVEs
 before 2.4.66-160000.3.1
2.4.66-160000.3.1
apache2-utils
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 13 CVEs
 before 2.4.66-160000.3.1
2.4.66-160000.3.1
apache2-worker
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 13 CVEs
 before 2.4.66-160000.3.1
2.4.66-160000.3.1
apache2
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 66 CVEs
 before 2.4.66-150400.6.57.1
2.4.66-150400.6.57.1
apache2
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
From an advisory covering 66 CVEs
 before 2.4.66-150400.6.57.1
2.4.66-150400.6.57.1
apache2
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS
From an advisory covering 66 CVEs
 before 2.4.66-150400.6.57.1
2.4.66-150400.6.57.1
apache2
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS
From an advisory covering 66 CVEs
 before 2.4.66-150400.6.57.1
2.4.66-150400.6.57.1
apache2
SUSE:Linux Enterprise Server 15 SP4-LTSS
From an advisory covering 66 CVEs
 before 2.4.66-150400.6.57.1
2.4.66-150400.6.57.1
apache2
SUSE:Linux Enterprise Server 15 SP5-LTSS
From an advisory covering 66 CVEs
 before 2.4.66-150400.6.57.1
2.4.66-150400.6.57.1
apache2
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
From an advisory covering 66 CVEs
 before 2.4.66-150400.6.57.1
2.4.66-150400.6.57.1
apache2
SUSE:Linux Enterprise Server for SAP Applications 15 SP5
From an advisory covering 66 CVEs
 before 2.4.66-150400.6.57.1
2.4.66-150400.6.57.1
apache2
SUSE:Linux Enterprise Server 12 SP5-LTSS
From an advisory covering 13 CVEs
 before 2.4.66-35.81.1
2.4.66-35.81.1
apache2-tls13
SUSE:Linux Enterprise Server 12 SP5-LTSS
From an advisory covering 13 CVEs
 before 2.4.66-35.81.1
2.4.66-35.81.1
apache2
SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5
From an advisory covering 13 CVEs
 before 2.4.66-35.81.1
2.4.66-35.81.1
apache2-tls13
SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5
From an advisory covering 13 CVEs
 before 2.4.66-35.81.1
2.4.66-35.81.1
apache2
SUSE:Linux Enterprise Server 15 SP6-LTSS
From an advisory covering 13 CVEs
 before 2.4.66-150600.5.55.1
2.4.66-150600.5.55.1
apache2-devel
SUSE:Linux Enterprise Server 15 SP6-LTSS
From an advisory covering 13 CVEs
 before 2.4.66-150600.5.55.1
2.4.66-150600.5.55.1
apache2-manual
SUSE:Linux Enterprise Server 15 SP6-LTSS
From an advisory covering 13 CVEs
 before 2.4.66-150600.5.55.1
2.4.66-150600.5.55.1
apache2-prefork
SUSE:Linux Enterprise Server 15 SP6-LTSS
From an advisory covering 13 CVEs
 before 2.4.66-150600.5.55.1
2.4.66-150600.5.55.1
apache2-utils
SUSE:Linux Enterprise Server 15 SP6-LTSS
From an advisory covering 13 CVEs
 before 2.4.66-150600.5.55.1
2.4.66-150600.5.55.1
apache2-worker
SUSE:Linux Enterprise Server 15 SP6-LTSS
From an advisory covering 13 CVEs
 before 2.4.66-150600.5.55.1
2.4.66-150600.5.55.1
apache2
SUSE:Linux Enterprise Server for SAP Applications 15 SP6
From an advisory covering 13 CVEs
 before 2.4.66-150600.5.55.1
2.4.66-150600.5.55.1
apache2-devel
SUSE:Linux Enterprise Server for SAP Applications 15 SP6
From an advisory covering 13 CVEs
 before 2.4.66-150600.5.55.1
2.4.66-150600.5.55.1
apache2-manual
SUSE:Linux Enterprise Server for SAP Applications 15 SP6
From an advisory covering 13 CVEs
 before 2.4.66-150600.5.55.1
2.4.66-150600.5.55.1
apache2-prefork
SUSE:Linux Enterprise Server for SAP Applications 15 SP6
From an advisory covering 13 CVEs
 before 2.4.66-150600.5.55.1
2.4.66-150600.5.55.1
apache2-utils
SUSE:Linux Enterprise Server for SAP Applications 15 SP6
From an advisory covering 13 CVEs
 before 2.4.66-150600.5.55.1
2.4.66-150600.5.55.1
apache2-worker
SUSE:Linux Enterprise Server for SAP Applications 15 SP6
From an advisory covering 13 CVEs
 before 2.4.66-150600.5.55.1
2.4.66-150600.5.55.1
apache2
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 13 CVEs
 before 2.4.66-150700.4.23.1
2.4.66-150700.4.23.1
apache2-prefork
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 13 CVEs
 before 2.4.66-150700.4.23.1
2.4.66-150700.4.23.1
apache2-event
SUSE:Linux Enterprise Module for Package Hub 15 SP7
From an advisory covering 13 CVEs
 before 2.4.66-150700.4.23.1
2.4.66-150700.4.23.1
apache2-devel
SUSE:Linux Enterprise Module for Server Applications 15 SP7
From an advisory covering 13 CVEs
 before 2.4.66-150700.4.23.1
2.4.66-150700.4.23.1
apache2-manual
SUSE:Linux Enterprise Module for Server Applications 15 SP7
From an advisory covering 13 CVEs
 before 2.4.66-150700.4.23.1
2.4.66-150700.4.23.1
apache2-utils
SUSE:Linux Enterprise Module for Server Applications 15 SP7
From an advisory covering 13 CVEs
 before 2.4.66-150700.4.23.1
2.4.66-150700.4.23.1
apache2-worker
SUSE:Linux Enterprise Module for Server Applications 15 SP7
From an advisory covering 13 CVEs
 before 2.4.66-150700.4.23.1
2.4.66-150700.4.23.1
nginx
Ubuntu:Pro:14.04:LTS
 before 1.4.6-1ubuntu3.9+esm8, plus listed versions
1.4.1-3ubuntu11.4.3-2ubuntu11.4.4-1ubuntu11.4.4-2ubuntu11.4.4-4ubuntu1
Show 18 moreShow less
1.4.5-1ubuntu11.4.6-1ubuntu21.4.6-1ubuntu31.4.6-1ubuntu3.11.4.6-1ubuntu3.21.4.6-1ubuntu3.31.4.6-1ubuntu3.41.4.6-1ubuntu3.51.4.6-1ubuntu3.61.4.6-1ubuntu3.71.4.6-1ubuntu3.81.4.6-1ubuntu3.91.4.6-1ubuntu3.9+esm11.4.6-1ubuntu3.9+esm21.4.6-1ubuntu3.9+esm31.4.6-1ubuntu3.9+esm41.4.6-1ubuntu3.9+esm51.4.6-1ubuntu3.9+esm6
1.4.6-1ubuntu3.9+esm8
apache2
Ubuntu:Pro:16.04:LTS
 before 2.4.18-2ubuntu3.17+esm19, plus listed versions
2.4.12-2ubuntu22.4.17-1ubuntu12.4.17-2ubuntu12.4.17-3ubuntu12.4.18-1ubuntu1
Show 34 moreShow less
2.4.18-2ubuntu12.4.18-2ubuntu22.4.18-2ubuntu32.4.18-2ubuntu3.12.4.18-2ubuntu3.22.4.18-2ubuntu3.32.4.18-2ubuntu3.42.4.18-2ubuntu3.52.4.18-2ubuntu3.72.4.18-2ubuntu3.82.4.18-2ubuntu3.92.4.18-2ubuntu3.102.4.18-2ubuntu3.122.4.18-2ubuntu3.132.4.18-2ubuntu3.142.4.18-2ubuntu3.152.4.18-2ubuntu3.172.4.18-2ubuntu3.17+esm12.4.18-2ubuntu3.17+esm22.4.18-2ubuntu3.17+esm32.4.18-2ubuntu3.17+esm42.4.18-2ubuntu3.17+esm52.4.18-2ubuntu3.17+esm62.4.18-2ubuntu3.17+esm72.4.18-2ubuntu3.17+esm82.4.18-2ubuntu3.17+esm92.4.18-2ubuntu3.17+esm102.4.18-2ubuntu3.17+esm112.4.18-2ubuntu3.17+esm122.4.18-2ubuntu3.17+esm132.4.18-2ubuntu3.17+esm142.4.18-2ubuntu3.17+esm162.4.18-2ubuntu3.17+esm172.4.18-2ubuntu3.17+esm18
2.4.18-2ubuntu3.17+esm19
nginx
Ubuntu:Pro:16.04:LTS
 before 1.10.3-0ubuntu0.16.04.5+esm9, plus listed versions
1.9.3-1ubuntu11.9.6-2ubuntu11.9.6-2ubuntu21.9.9-0ubuntu11.9.9-1ubuntu1
Show 24 moreShow less
1.9.10-0ubuntu11.9.10-1ubuntu11.9.11-0ubuntu11.9.11-0ubuntu21.9.12-0ubuntu11.9.13-0ubuntu11.9.14-0ubuntu11.9.15-0ubuntu11.10.0-0ubuntu0.16.04.11.10.0-0ubuntu0.16.04.21.10.0-0ubuntu0.16.04.31.10.0-0ubuntu0.16.04.41.10.3-0ubuntu0.16.04.11.10.3-0ubuntu0.16.04.21.10.3-0ubuntu0.16.04.31.10.3-0ubuntu0.16.04.41.10.3-0ubuntu0.16.04.51.10.3-0ubuntu0.16.04.5+esm11.10.3-0ubuntu0.16.04.5+esm21.10.3-0ubuntu0.16.04.5+esm31.10.3-0ubuntu0.16.04.5+esm41.10.3-0ubuntu0.16.04.5+esm51.10.3-0ubuntu0.16.04.5+esm61.10.3-0ubuntu0.16.04.5+esm7
1.10.3-0ubuntu0.16.04.5+esm9
apache2
Ubuntu:Pro:18.04:LTS
 before 2.4.29-1ubuntu4.27+esm10, plus listed versions
2.4.27-2ubuntu32.4.29-1ubuntu12.4.29-1ubuntu22.4.29-1ubuntu32.4.29-1ubuntu4
Show 33 moreShow less
2.4.29-1ubuntu4.12.4.29-1ubuntu4.22.4.29-1ubuntu4.32.4.29-1ubuntu4.42.4.29-1ubuntu4.52.4.29-1ubuntu4.62.4.29-1ubuntu4.72.4.29-1ubuntu4.82.4.29-1ubuntu4.102.4.29-1ubuntu4.112.4.29-1ubuntu4.122.4.29-1ubuntu4.132.4.29-1ubuntu4.142.4.29-1ubuntu4.162.4.29-1ubuntu4.172.4.29-1ubuntu4.182.4.29-1ubuntu4.192.4.29-1ubuntu4.202.4.29-1ubuntu4.212.4.29-1ubuntu4.222.4.29-1ubuntu4.232.4.29-1ubuntu4.242.4.29-1ubuntu4.252.4.29-1ubuntu4.262.4.29-1ubuntu4.272.4.29-1ubuntu4.27+esm12.4.29-1ubuntu4.27+esm22.4.29-1ubuntu4.27+esm32.4.29-1ubuntu4.27+esm42.4.29-1ubuntu4.27+esm62.4.29-1ubuntu4.27+esm72.4.29-1ubuntu4.27+esm82.4.29-1ubuntu4.27+esm9
2.4.29-1ubuntu4.27+esm10
nginx
Ubuntu:Pro:18.04:LTS
 before 1.14.0-0ubuntu1.11+esm4, plus listed versions
1.12.1-0ubuntu21.13.6-2ubuntu11.13.6-2ubuntu21.13.10-1ubuntu11.13.12-0ubuntu1
Show 13 moreShow less
1.14.0-0ubuntu11.14.0-0ubuntu1.11.14.0-0ubuntu1.21.14.0-0ubuntu1.31.14.0-0ubuntu1.41.14.0-0ubuntu1.51.14.0-0ubuntu1.61.14.0-0ubuntu1.71.14.0-0ubuntu1.91.14.0-0ubuntu1.101.14.0-0ubuntu1.111.14.0-0ubuntu1.11+esm11.14.0-0ubuntu1.11+esm2
1.14.0-0ubuntu1.11+esm4
apache2
Ubuntu:Pro:20.04:LTS
 before 2.4.41-4ubuntu3.23+esm5, plus listed versions
2.4.41-1ubuntu12.4.41-4ubuntu12.4.41-4ubuntu22.4.41-4ubuntu32.4.41-4ubuntu3.1
Show 22 moreShow less
2.4.41-4ubuntu3.32.4.41-4ubuntu3.42.4.41-4ubuntu3.52.4.41-4ubuntu3.62.4.41-4ubuntu3.72.4.41-4ubuntu3.82.4.41-4ubuntu3.92.4.41-4ubuntu3.102.4.41-4ubuntu3.112.4.41-4ubuntu3.122.4.41-4ubuntu3.132.4.41-4ubuntu3.142.4.41-4ubuntu3.152.4.41-4ubuntu3.162.4.41-4ubuntu3.172.4.41-4ubuntu3.192.4.41-4ubuntu3.202.4.41-4ubuntu3.212.4.41-4ubuntu3.232.4.41-4ubuntu3.23+esm22.4.41-4ubuntu3.23+esm32.4.41-4ubuntu3.23+esm4
2.4.41-4ubuntu3.23+esm5
nginx
Ubuntu:Pro:20.04:LTS
 before 1.18.0-0ubuntu1.7+esm3, plus listed versions
1.16.1-0ubuntu21.16.1-0ubuntu31.17.5-0ubuntu11.17.6-0ubuntu11.17.7-0ubuntu1
Show 15 moreShow less
1.17.8-0ubuntu11.17.8-0ubuntu21.17.8-0ubuntu31.17.9-0ubuntu11.17.9-0ubuntu21.17.9-0ubuntu31.17.10-0ubuntu11.18.0-0ubuntu11.18.0-0ubuntu1.21.18.0-0ubuntu1.31.18.0-0ubuntu1.41.18.0-0ubuntu1.51.18.0-0ubuntu1.61.18.0-0ubuntu1.71.18.0-0ubuntu1.7+esm1
1.18.0-0ubuntu1.7+esm3
apache2
Ubuntu:22.04:LTS
 before 2.4.52-1ubuntu4.21, plus listed versions
2.4.48-3.1ubuntu32.4.48-3.1ubuntu42.4.51-2ubuntu12.4.52-1ubuntu12.4.52-1ubuntu2
Show 20 moreShow less
2.4.52-1ubuntu42.4.52-1ubuntu4.12.4.52-1ubuntu4.22.4.52-1ubuntu4.32.4.52-1ubuntu4.42.4.52-1ubuntu4.52.4.52-1ubuntu4.62.4.52-1ubuntu4.72.4.52-1ubuntu4.82.4.52-1ubuntu4.92.4.52-1ubuntu4.102.4.52-1ubuntu4.112.4.52-1ubuntu4.122.4.52-1ubuntu4.132.4.52-1ubuntu4.142.4.52-1ubuntu4.152.4.52-1ubuntu4.162.4.52-1ubuntu4.182.4.52-1ubuntu4.192.4.52-1ubuntu4.20
2.4.52-1ubuntu4.21
nginx
Ubuntu:22.04:LTS
 before 1.18.0-6ubuntu14.15, plus listed versions
1.18.0-6ubuntu111.18.0-6ubuntu121.18.0-6ubuntu141.18.0-6ubuntu14.11.18.0-6ubuntu14.2
Show 11 moreShow less
1.18.0-6ubuntu14.31.18.0-6ubuntu14.41.18.0-6ubuntu14.51.18.0-6ubuntu14.61.18.0-6ubuntu14.71.18.0-6ubuntu14.81.18.0-6ubuntu14.101.18.0-6ubuntu14.111.18.0-6ubuntu14.121.18.0-6ubuntu14.131.18.0-6ubuntu14.14
1.18.0-6ubuntu14.15
apache2
Ubuntu:24.04:LTS
 before 2.4.58-1ubuntu8.13, plus listed versions
2.4.57-2ubuntu22.4.57-2ubuntu32.4.58-1ubuntu12.4.58-1ubuntu22.4.58-1ubuntu6
Show 13 moreShow less
2.4.58-1ubuntu72.4.58-1ubuntu82.4.58-1ubuntu8.12.4.58-1ubuntu8.22.4.58-1ubuntu8.32.4.58-1ubuntu8.42.4.58-1ubuntu8.52.4.58-1ubuntu8.62.4.58-1ubuntu8.72.4.58-1ubuntu8.82.4.58-1ubuntu8.102.4.58-1ubuntu8.112.4.58-1ubuntu8.12
2.4.58-1ubuntu8.13
nginx
Ubuntu:24.04:LTS
 before 1.24.0-2ubuntu7.12, plus listed versions
1.24.0-1ubuntu11.24.0-2ubuntu11.24.0-2ubuntu21.24.0-2ubuntu31.24.0-2ubuntu4
Show 12 moreShow less
1.24.0-2ubuntu61.24.0-2ubuntu71.24.0-2ubuntu7.11.24.0-2ubuntu7.31.24.0-2ubuntu7.41.24.0-2ubuntu7.51.24.0-2ubuntu7.61.24.0-2ubuntu7.71.24.0-2ubuntu7.81.24.0-2ubuntu7.91.24.0-2ubuntu7.101.24.0-2ubuntu7.11
1.24.0-2ubuntu7.12
apache2
Ubuntu:25.10
 before 2.4.64-1ubuntu3.5, plus listed versions
2.4.63-1ubuntu12.4.63-1ubuntu32.4.64-1ubuntu22.4.64-1ubuntu32.4.64-1ubuntu3.22.4.64-1ubuntu3.32.4.64-1ubuntu3.4
2.4.64-1ubuntu3.5
nginx
Ubuntu:25.10
 before 1.28.0-6ubuntu1.7, plus listed versions
1.26.3-2ubuntu11.26.3-3ubuntu11.26.3-3ubuntu21.26.3-3ubuntu31.28.0-3ubuntu1
Show 8 moreShow less
1.28.0-4ubuntu11.28.0-6ubuntu11.28.0-6ubuntu1.11.28.0-6ubuntu1.21.28.0-6ubuntu1.31.28.0-6ubuntu1.41.28.0-6ubuntu1.51.28.0-6ubuntu1.6
1.28.0-6ubuntu1.7
apache2
Ubuntu:26.04:LTS
 before 2.4.66-2ubuntu2.2, plus listed versions
2.4.64-1ubuntu32.4.65-3ubuntu12.4.66-2ubuntu12.4.66-2ubuntu22.4.66-2ubuntu2.1
2.4.66-2ubuntu2.2
nginx
Ubuntu:26.04:LTS
 before 1.28.3-2ubuntu1.5, plus listed versions
1.28.0-6ubuntu11.28.1-2ubuntu11.28.1-3ubuntu11.28.2-2ubuntu11.28.3-2ubuntu1
Show 4 moreShow less
1.28.3-2ubuntu1.11.28.3-2ubuntu1.21.28.3-2ubuntu1.31.28.3-2ubuntu1.4
1.28.3-2ubuntu1.5
nginx
Ubuntu:22.04:LTS
 before 1.18.0-6ubuntu14.13, plus listed versions
1.18.0-6ubuntu111.18.0-6ubuntu121.18.0-6ubuntu141.18.0-6ubuntu14.11.18.0-6ubuntu14.2
Show 9 moreShow less
1.18.0-6ubuntu14.31.18.0-6ubuntu14.41.18.0-6ubuntu14.51.18.0-6ubuntu14.61.18.0-6ubuntu14.71.18.0-6ubuntu14.81.18.0-6ubuntu14.101.18.0-6ubuntu14.111.18.0-6ubuntu14.12
1.18.0-6ubuntu14.13
nginx
Ubuntu:24.04:LTS
 before 1.24.0-2ubuntu7.10, plus listed versions
1.24.0-1ubuntu11.24.0-2ubuntu11.24.0-2ubuntu21.24.0-2ubuntu31.24.0-2ubuntu4
Show 10 moreShow less
1.24.0-2ubuntu61.24.0-2ubuntu71.24.0-2ubuntu7.11.24.0-2ubuntu7.31.24.0-2ubuntu7.41.24.0-2ubuntu7.51.24.0-2ubuntu7.61.24.0-2ubuntu7.71.24.0-2ubuntu7.81.24.0-2ubuntu7.9
1.24.0-2ubuntu7.10
nginx
Ubuntu:25.10
 before 1.28.0-6ubuntu1.5, plus listed versions
1.26.3-2ubuntu11.26.3-3ubuntu11.26.3-3ubuntu21.26.3-3ubuntu31.28.0-3ubuntu1
Show 6 moreShow less
1.28.0-4ubuntu11.28.0-6ubuntu11.28.0-6ubuntu1.11.28.0-6ubuntu1.21.28.0-6ubuntu1.31.28.0-6ubuntu1.4
1.28.0-6ubuntu1.5
nginx
Ubuntu:26.04:LTS
 before 1.28.3-2ubuntu1.3, plus listed versions
1.28.0-6ubuntu11.28.1-2ubuntu11.28.1-3ubuntu11.28.2-2ubuntu11.28.3-2ubuntu11.28.3-2ubuntu1.11.28.3-2ubuntu1.2
1.28.3-2ubuntu1.3
apache2
Ubuntu:Pro:14.04:LTS
From an advisory covering 15 CVEs
 before 2.4.7-1ubuntu4.22+esm14, plus listed versions
2.4.6-2ubuntu22.4.6-2ubuntu32.4.6-2ubuntu42.4.7-1ubuntu12.4.7-1ubuntu2
Show 31 moreShow less
2.4.7-1ubuntu32.4.7-1ubuntu42.4.7-1ubuntu4.12.4.7-1ubuntu4.42.4.7-1ubuntu4.52.4.7-1ubuntu4.62.4.7-1ubuntu4.72.4.7-1ubuntu4.82.4.7-1ubuntu4.92.4.7-1ubuntu4.102.4.7-1ubuntu4.112.4.7-1ubuntu4.132.4.7-1ubuntu4.152.4.7-1ubuntu4.162.4.7-1ubuntu4.172.4.7-1ubuntu4.182.4.7-1ubuntu4.192.4.7-1ubuntu4.202.4.7-1ubuntu4.212.4.7-1ubuntu4.222.4.7-1ubuntu4.22+esm12.4.7-1ubuntu4.22+esm22.4.7-1ubuntu4.22+esm32.4.7-1ubuntu4.22+esm42.4.7-1ubuntu4.22+esm52.4.7-1ubuntu4.22+esm62.4.7-1ubuntu4.22+esm82.4.7-1ubuntu4.22+esm92.4.7-1ubuntu4.22+esm102.4.7-1ubuntu4.22+esm122.4.7-1ubuntu4.22+esm13
2.4.7-1ubuntu4.22+esm14
apache2
Ubuntu:Pro:16.04:LTS
From an advisory covering 15 CVEs
 before 2.4.18-2ubuntu3.17+esm19, plus listed versions
2.4.12-2ubuntu22.4.17-1ubuntu12.4.17-2ubuntu12.4.17-3ubuntu12.4.18-1ubuntu1
Show 34 moreShow less
2.4.18-2ubuntu12.4.18-2ubuntu22.4.18-2ubuntu32.4.18-2ubuntu3.12.4.18-2ubuntu3.22.4.18-2ubuntu3.32.4.18-2ubuntu3.42.4.18-2ubuntu3.52.4.18-2ubuntu3.72.4.18-2ubuntu3.82.4.18-2ubuntu3.92.4.18-2ubuntu3.102.4.18-2ubuntu3.122.4.18-2ubuntu3.132.4.18-2ubuntu3.142.4.18-2ubuntu3.152.4.18-2ubuntu3.172.4.18-2ubuntu3.17+esm12.4.18-2ubuntu3.17+esm22.4.18-2ubuntu3.17+esm32.4.18-2ubuntu3.17+esm42.4.18-2ubuntu3.17+esm52.4.18-2ubuntu3.17+esm62.4.18-2ubuntu3.17+esm72.4.18-2ubuntu3.17+esm82.4.18-2ubuntu3.17+esm92.4.18-2ubuntu3.17+esm102.4.18-2ubuntu3.17+esm112.4.18-2ubuntu3.17+esm122.4.18-2ubuntu3.17+esm132.4.18-2ubuntu3.17+esm142.4.18-2ubuntu3.17+esm162.4.18-2ubuntu3.17+esm172.4.18-2ubuntu3.17+esm18
2.4.18-2ubuntu3.17+esm19
apache2
Ubuntu:Pro:18.04:LTS
From an advisory covering 15 CVEs
 before 2.4.29-1ubuntu4.27+esm10, plus listed versions
2.4.27-2ubuntu32.4.29-1ubuntu12.4.29-1ubuntu22.4.29-1ubuntu32.4.29-1ubuntu4
Show 33 moreShow less
2.4.29-1ubuntu4.12.4.29-1ubuntu4.22.4.29-1ubuntu4.32.4.29-1ubuntu4.42.4.29-1ubuntu4.52.4.29-1ubuntu4.62.4.29-1ubuntu4.72.4.29-1ubuntu4.82.4.29-1ubuntu4.102.4.29-1ubuntu4.112.4.29-1ubuntu4.122.4.29-1ubuntu4.132.4.29-1ubuntu4.142.4.29-1ubuntu4.162.4.29-1ubuntu4.172.4.29-1ubuntu4.182.4.29-1ubuntu4.192.4.29-1ubuntu4.202.4.29-1ubuntu4.212.4.29-1ubuntu4.222.4.29-1ubuntu4.232.4.29-1ubuntu4.242.4.29-1ubuntu4.252.4.29-1ubuntu4.262.4.29-1ubuntu4.272.4.29-1ubuntu4.27+esm12.4.29-1ubuntu4.27+esm22.4.29-1ubuntu4.27+esm32.4.29-1ubuntu4.27+esm42.4.29-1ubuntu4.27+esm62.4.29-1ubuntu4.27+esm72.4.29-1ubuntu4.27+esm82.4.29-1ubuntu4.27+esm9
2.4.29-1ubuntu4.27+esm10
apache2
Ubuntu:Pro:20.04:LTS
From an advisory covering 15 CVEs
 before 2.4.41-4ubuntu3.23+esm5, plus listed versions
2.4.41-1ubuntu12.4.41-4ubuntu12.4.41-4ubuntu22.4.41-4ubuntu32.4.41-4ubuntu3.1
Show 22 moreShow less
2.4.41-4ubuntu3.32.4.41-4ubuntu3.42.4.41-4ubuntu3.52.4.41-4ubuntu3.62.4.41-4ubuntu3.72.4.41-4ubuntu3.82.4.41-4ubuntu3.92.4.41-4ubuntu3.102.4.41-4ubuntu3.112.4.41-4ubuntu3.122.4.41-4ubuntu3.132.4.41-4ubuntu3.142.4.41-4ubuntu3.152.4.41-4ubuntu3.162.4.41-4ubuntu3.172.4.41-4ubuntu3.192.4.41-4ubuntu3.202.4.41-4ubuntu3.212.4.41-4ubuntu3.232.4.41-4ubuntu3.23+esm22.4.41-4ubuntu3.23+esm32.4.41-4ubuntu3.23+esm4
2.4.41-4ubuntu3.23+esm5
apache2
openSUSE:Leap 16.0
From an advisory covering 13 CVEs
 before 2.4.66-160000.3.1
2.4.66-160000.3.1
apache2-devel
openSUSE:Leap 16.0
From an advisory covering 13 CVEs
 before 2.4.66-160000.3.1
2.4.66-160000.3.1
apache2-event
openSUSE:Leap 16.0
From an advisory covering 13 CVEs
 before 2.4.66-160000.3.1
2.4.66-160000.3.1
apache2-manual
openSUSE:Leap 16.0
From an advisory covering 13 CVEs
 before 2.4.66-160000.3.1
2.4.66-160000.3.1
apache2-prefork
openSUSE:Leap 16.0
From an advisory covering 13 CVEs
 before 2.4.66-160000.3.1
2.4.66-160000.3.1
apache2-utils
openSUSE:Leap 16.0
From an advisory covering 13 CVEs
 before 2.4.66-160000.3.1
2.4.66-160000.3.1
apache2-worker
openSUSE:Leap 16.0
From an advisory covering 13 CVEs
 before 2.4.66-160000.3.1
2.4.66-160000.3.1

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
PoC in GitHubfevar54/Proof-of-Concept-POC---CVE-2026-49975-HTTP-2-Bomb-2026-06-03
PoC in GitHubmrx-arafat/CVE-2026-49975-POC2026-06-04
PoC in GitHubrenzi25031469/CVE-2026-49975-HTTP-2-Bomb2026-06-08
PoC in GitHubEQSTLab/CVE-2026-499752026-06-10
PoC in GitHubLSG-PolarBear/CVE-2026-499752026-06-10
PoC in GitHubLiaoZiqi-GZFLS/CVE-2026-499752026-06-10
PoC in GitHubminc-nice-100/http2-bomb-analysis-paper2026-06-13
PoC in GitHubrazureink/cve-2026-49975-http2bomb_reproduction2026-06-13
PoC in GitHub0xc03307b/CVE-2026-499752026-06-18
PoC in GitHubwlor0623/http2-bomb-detector2026-06-20
PoC in GitHubManisso/http2-bomb2026-07-05
PoC in GitHubyym8538/CVE-2026-499752026-08-21
PoC in GitHubnaheeju/POC-CVE-2026-499752026-09-16

History

History
RecordedChangedSources
affected
referencesOSV
exploits, factsOSV
affected
affected, aliases, referencesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV, PoC in GitHub

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-49975 is a high vulnerability (CVSS 7.5) in Apache Http Server, published June 3, 2026. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 33.0%, the 98th percentile. Fixed in apache2 2.4.68-r0.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 298 package rows and 105 references. The JSON record has them. Left out on purpose, here and in the API, to keep responses small: 19 source records.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open