{"id":"CVE-2016-5387","aliases":["ALPINE-CVE-2016-5387","DEBIAN-CVE-2016-5387","DLA-553-1","DSA-3623-1","EUVD-2016-6337","GHSA-9hqr-6p2v-pfp2","MGASA-2016-0262","MGASA-2017-0146","RHSA-2016:1420","RHSA-2016:1421","RHSA-2016:1422","RHSA-2016:1635","RHSA-2016:1636","RHSA-2016:1648","RHSA-2016:1649","RHSA-2016:1851","SUSE-SU-2016:1818-1","SUSE-SU-2016:1819-1","SUSE-SU-2016:2090-1","UBUNTU-CVE-2016-5387","USN-3038-1","openSUSE-SU-2024:10623-1"],"status":"published","title":"The Apache HTTP Server through 2.4.23 follows RFC 3875 section 4.1.18 and therefore does not...","description":"The Apache HTTP Server through 2.4.23 follows RFC 3875 section 4.1.18 and therefore does not protect applications from the presence of untrusted client data in the HTTP_PROXY environment variable, which might allow remote attackers to redirect an application's outbound HTTP traffic to an arbitrary proxy server via a crafted Proxy header in an HTTP request, aka an \"httpoxy\" issue.  NOTE: the vendor states \"This mitigation has been assigned the identifier CVE-2016-5387\"; in other words, this is not a CVE ID for a vulnerability.","severity":{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-06","score":0.55724,"percentile":0.99046,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-284"],"published":"2016-07-18T14:00:00Z","modified":"2026-10-24T10:30:27Z","fixes":[{"ecosystem":"Alpine:v3.4","package":"apache2","fixed_in":["2.4.23-r1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"apache2","fixed_in":["2.4.23-2"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"apache2","fixed_in":["2.4.23-2"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"apache2","fixed_in":["2.4.23-2"],"sources":["osv"]},{"ecosystem":"Debian:7","package":"apache2","fixed_in":["2.2.22-13+deb7u7"],"sources":["osv"]},{"ecosystem":"Debian:8","package":"apache2","fixed_in":["2.4.10-10+deb8u5"],"sources":["osv"]},{"ecosystem":"Mageia:5","package":"apache","fixed_in":["2.4.10-16.4.mga5"],"sources":["osv"]},{"ecosystem":"Mageia:5","package":"perl-CGI-Emulate-PSGI","fixed_in":["0.200.0-5.1.mga5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::client","package":"httpd","fixed_in":["0:2.2.3-92.el5_11"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::client","package":"httpd-debuginfo","fixed_in":["0:2.2.3-92.el5_11"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::client","package":"mod_ssl","fixed_in":["1:2.2.3-92.el5_11"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"httpd","fixed_in":["0:2.2.3-92.el5_11"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"httpd-debuginfo","fixed_in":["0:2.2.3-92.el5_11"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"httpd-devel","fixed_in":["0:2.2.3-92.el5_11"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"httpd-manual","fixed_in":["0:2.2.3-92.el5_11"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::server","package":"httpd","fixed_in":["0:2.2.3-92.el5_11"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::server","package":"httpd-debuginfo","fixed_in":["0:2.2.3-92.el5_11"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::server","package":"httpd-devel","fixed_in":["0:2.2.3-92.el5_11"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::server","package":"httpd-manual","fixed_in":["0:2.2.3-92.el5_11"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::server","package":"mod_ssl","fixed_in":["1:2.2.3-92.el5_11"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"httpd","fixed_in":["0:2.2.15-54.el6_8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"httpd-debuginfo","fixed_in":["0:2.2.15-54.el6_8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"httpd-tools","fixed_in":["0:2.2.15-54.el6_8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"httpd-devel","fixed_in":["0:2.2.15-54.el6_8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"httpd-manual","fixed_in":["0:2.2.15-54.el6_8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"mod_ssl","fixed_in":["1:2.2.15-54.el6_8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"httpd","fixed_in":["0:2.2.15-54.el6_8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"httpd-debuginfo","fixed_in":["0:2.2.15-54.el6_8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"httpd-tools","fixed_in":["0:2.2.15-54.el6_8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"httpd-devel","fixed_in":["0:2.2.15-54.el6_8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"httpd-manual","fixed_in":["0:2.2.15-54.el6_8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"mod_ssl","fixed_in":["1:2.2.15-54.el6_8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"httpd","fixed_in":["0:2.2.15-54.el6_8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"httpd-debuginfo","fixed_in":["0:2.2.15-54.el6_8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"httpd-devel","fixed_in":["0:2.2.15-54.el6_8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"httpd-manual","fixed_in":["0:2.2.15-54.el6_8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"httpd-tools","fixed_in":["0:2.2.15-54.el6_8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"mod_ssl","fixed_in":["1:2.2.15-54.el6_8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"httpd","fixed_in":["0:2.2.15-54.el6_8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"httpd-debuginfo","fixed_in":["0:2.2.15-54.el6_8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"httpd-devel","fixed_in":["0:2.2.15-54.el6_8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"httpd-manual","fixed_in":["0:2.2.15-54.el6_8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"httpd-tools","fixed_in":["0:2.2.15-54.el6_8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"mod_ssl","fixed_in":["1:2.2.15-54.el6_8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"httpd","fixed_in":["0:2.4.6-40.el7_2.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"httpd-debuginfo","fixed_in":["0:2.4.6-40.el7_2.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"httpd-devel","fixed_in":["0:2.4.6-40.el7_2.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"httpd-manual","fixed_in":["0:2.4.6-40.el7_2.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"httpd-tools","fixed_in":["0:2.4.6-40.el7_2.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"mod_ldap","fixed_in":["0:2.4.6-40.el7_2.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"mod_proxy_html","fixed_in":["1:2.4.6-40.el7_2.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"mod_session","fixed_in":["0:2.4.6-40.el7_2.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"mod_ssl","fixed_in":["1:2.4.6-40.el7_2.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"httpd","fixed_in":["0:2.4.6-40.el7_2.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"httpd-debuginfo","fixed_in":["0:2.4.6-40.el7_2.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"httpd-devel","fixed_in":["0:2.4.6-40.el7_2.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"httpd-manual","fixed_in":["0:2.4.6-40.el7_2.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"httpd-tools","fixed_in":["0:2.4.6-40.el7_2.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"mod_ldap","fixed_in":["0:2.4.6-40.el7_2.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"mod_proxy_html","fixed_in":["1:2.4.6-40.el7_2.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"mod_session","fixed_in":["0:2.4.6-40.el7_2.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"mod_ssl","fixed_in":["1:2.4.6-40.el7_2.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"httpd","fixed_in":["0:2.4.6-40.el7_2.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"httpd-debuginfo","fixed_in":["0:2.4.6-40.el7_2.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"httpd-devel","fixed_in":["0:2.4.6-40.el7_2.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"httpd-manual","fixed_in":["0:2.4.6-40.el7_2.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"httpd-tools","fixed_in":["0:2.4.6-40.el7_2.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"mod_ssl","fixed_in":["1:2.4.6-40.el7_2.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"mod_ldap","fixed_in":["0:2.4.6-40.el7_2.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"mod_proxy_html","fixed_in":["1:2.4.6-40.el7_2.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"mod_session","fixed_in":["0:2.4.6-40.el7_2.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"httpd","fixed_in":["0:2.4.6-40.el7_2.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"httpd-debuginfo","fixed_in":["0:2.4.6-40.el7_2.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"httpd-devel","fixed_in":["0:2.4.6-40.el7_2.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"httpd-manual","fixed_in":["0:2.4.6-40.el7_2.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"httpd-tools","fixed_in":["0:2.4.6-40.el7_2.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"mod_ssl","fixed_in":["1:2.4.6-40.el7_2.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"mod_ldap","fixed_in":["0:2.4.6-40.el7_2.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"mod_proxy_html","fixed_in":["1:2.4.6-40.el7_2.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"mod_session","fixed_in":["0:2.4.6-40.el7_2.4"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_core_services:1::el6","package":"jbcs-httpd24-httpd","fixed_in":["0:2.4.6-77.SP1.jbcs.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_core_services:1::el6","package":"jbcs-httpd24-httpd-debuginfo","fixed_in":["0:2.4.6-77.SP1.jbcs.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_core_services:1::el6","package":"jbcs-httpd24-httpd-devel","fixed_in":["0:2.4.6-77.SP1.jbcs.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_core_services:1::el6","package":"jbcs-httpd24-httpd-manual","fixed_in":["0:2.4.6-77.SP1.jbcs.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_core_services:1::el6","package":"jbcs-httpd24-httpd-src-zip","fixed_in":["0:2.4.6-77.SP1.jbcs.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_core_services:1::el6","package":"jbcs-httpd24-httpd-tools","fixed_in":["0:2.4.6-77.SP1.jbcs.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_core_services:1::el6","package":"jbcs-httpd24-httpd-zip","fixed_in":["0:2.4.6-77.SP1.jbcs.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_core_services:1::el6","package":"jbcs-httpd24-mod_ldap","fixed_in":["0:2.4.6-77.SP1.jbcs.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_core_services:1::el6","package":"jbcs-httpd24-mod_proxy_html","fixed_in":["1:2.4.6-77.SP1.jbcs.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_core_services:1::el6","package":"jbcs-httpd24-mod_session","fixed_in":["0:2.4.6-77.SP1.jbcs.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_core_services:1::el6","package":"jbcs-httpd24-mod_ssl","fixed_in":["1:2.4.6-77.SP1.jbcs.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-httpd","fixed_in":["0:2.4.6-77.SP1.jbcs.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-httpd-debuginfo","fixed_in":["0:2.4.6-77.SP1.jbcs.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-httpd-devel","fixed_in":["0:2.4.6-77.SP1.jbcs.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-httpd-manual","fixed_in":["0:2.4.6-77.SP1.jbcs.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-httpd-src-zip","fixed_in":["0:2.4.6-77.SP1.jbcs.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-httpd-tools","fixed_in":["0:2.4.6-77.SP1.jbcs.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-httpd-zip","fixed_in":["0:2.4.6-77.SP1.jbcs.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-mod_ldap","fixed_in":["0:2.4.6-77.SP1.jbcs.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-mod_proxy_html","fixed_in":["1:2.4.6-77.SP1.jbcs.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-mod_session","fixed_in":["0:2.4.6-77.SP1.jbcs.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-mod_ssl","fixed_in":["1:2.4.6-77.SP1.jbcs.el7"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP1","package":"apache2","fixed_in":["2.4.16-7.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP1","package":"apache2","fixed_in":["2.4.16-7.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"apache2","fixed_in":["2.4.16-7.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 11 SP4","package":"apache2","fixed_in":["2.2.12-64.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"apache2","fixed_in":["2.2.12-64.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"apache2","fixed_in":["2.2.12-64.1"],"sources":["osv"]},{"ecosystem":"SUSE:Studio Onsite 1.3","package":"apache2","fixed_in":["2.2.12-64.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12","package":"apache2","fixed_in":["2.4.10-14.17.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12-LTSS","package":"apache2","fixed_in":["2.4.10-14.17.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"apache2","fixed_in":["2.4.7-1ubuntu4.13"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"apache2","fixed_in":["2.4.18-2ubuntu3.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.4","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.23-r1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.23-2"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.23-2"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.23-2"}]}]},{"source":"osv","ecosystem":"Debian:7","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.22-13+deb7u7"}]}],"versions":["2.2.22-13","2.2.22-13+deb7u1","2.2.22-13+deb7u2","2.2.22-13+deb7u3","2.2.22-13+deb7u4","2.2.22-13+deb7u5","2.2.22-13+deb7u6"]},{"source":"osv","ecosystem":"Debian:8","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.10-10+deb8u5"}]}],"versions":["2.4.10-10","2.4.10-10+deb8u1","2.4.10-10+deb8u2","2.4.10-10+deb8u3","2.4.10-10+deb8u4"]},{"source":"osv","ecosystem":"Mageia:5","package":"apache","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.10-16.4.mga5"}]}]},{"source":"osv","ecosystem":"Mageia:5","package":"perl-CGI-Emulate-PSGI","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.200.0-5.1.mga5"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"httpd24-httpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.18-11.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"httpd24-httpd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.18-11.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"httpd24-httpd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.18-11.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"httpd24-httpd-manual","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.18-11.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"httpd24-httpd-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.18-11.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"httpd24-mod_ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.18-11.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"httpd24-mod_proxy_html","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.18-11.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"httpd24-mod_session","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.18-11.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"httpd24-mod_ssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.18-11.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"httpd24-httpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.18-11.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"httpd24-httpd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.18-11.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"httpd24-httpd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.18-11.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"httpd24-httpd-manual","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.18-11.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"httpd24-httpd-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.18-11.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"httpd24-mod_ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.18-11.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"httpd24-mod_proxy_html","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.18-11.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"httpd24-mod_session","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.18-11.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"httpd24-mod_ssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.18-11.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"httpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.3-92.el5_11"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"httpd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.3-92.el5_11"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"mod_ssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.2.3-92.el5_11"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"httpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.3-92.el5_11"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"httpd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.3-92.el5_11"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"httpd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.3-92.el5_11"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"httpd-manual","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.3-92.el5_11"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"httpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.3-92.el5_11"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"httpd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.3-92.el5_11"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"httpd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.3-92.el5_11"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"httpd-manual","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.3-92.el5_11"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"mod_ssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.2.3-92.el5_11"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"httpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.15-54.el6_8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"httpd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.15-54.el6_8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"httpd-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.15-54.el6_8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"httpd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.15-54.el6_8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"httpd-manual","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.15-54.el6_8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"mod_ssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.2.15-54.el6_8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"httpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.15-54.el6_8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"httpd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.15-54.el6_8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"httpd-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.15-54.el6_8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"httpd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.15-54.el6_8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"httpd-manual","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.15-54.el6_8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"mod_ssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.2.15-54.el6_8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"httpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.15-54.el6_8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"httpd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.15-54.el6_8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"httpd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.15-54.el6_8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"httpd-manual","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.15-54.el6_8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"httpd-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.15-54.el6_8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"mod_ssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.2.15-54.el6_8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"httpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.15-54.el6_8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"httpd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.15-54.el6_8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"httpd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.15-54.el6_8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"httpd-manual","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.15-54.el6_8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"httpd-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.15-54.el6_8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"mod_ssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.2.15-54.el6_8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"httpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-40.el7_2.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"httpd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-40.el7_2.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"httpd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-40.el7_2.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"httpd-manual","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-40.el7_2.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"httpd-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-40.el7_2.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"mod_ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-40.el7_2.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"mod_proxy_html","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.6-40.el7_2.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"mod_session","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-40.el7_2.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"mod_ssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.6-40.el7_2.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"httpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-40.el7_2.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"httpd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-40.el7_2.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"httpd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-40.el7_2.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"httpd-manual","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-40.el7_2.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"httpd-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-40.el7_2.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"mod_ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-40.el7_2.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"mod_proxy_html","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.6-40.el7_2.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"mod_session","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-40.el7_2.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"mod_ssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.6-40.el7_2.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"httpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-40.el7_2.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"httpd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-40.el7_2.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"httpd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-40.el7_2.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"httpd-manual","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-40.el7_2.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"httpd-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-40.el7_2.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"mod_ssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.6-40.el7_2.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"mod_ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-40.el7_2.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"mod_proxy_html","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.6-40.el7_2.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"mod_session","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-40.el7_2.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"httpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-40.el7_2.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"httpd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-40.el7_2.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"httpd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-40.el7_2.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"httpd-manual","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-40.el7_2.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"httpd-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-40.el7_2.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"mod_ssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.6-40.el7_2.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"mod_ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-40.el7_2.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"mod_proxy_html","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.6-40.el7_2.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"mod_session","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-40.el7_2.4"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:3.0::el7","package":"httpd24","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-62.ep7.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:3.0::el7","package":"httpd24-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-62.ep7.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:3.0::el7","package":"httpd24-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-62.ep7.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:3.0::el7","package":"httpd24-manual","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-62.ep7.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:3.0::el7","package":"httpd24-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-62.ep7.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:3.0::el7","package":"mod_ldap24","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-62.ep7.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:3.0::el7","package":"mod_proxy24_html","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.6-62.ep7.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:3.0::el7","package":"mod_session24","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-62.ep7.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:3.0::el7","package":"mod_ssl24","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.6-62.ep7.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:3.0::el7","package":"tomcat7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0.59-51_patch_01.ep7.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:3.0::el7","package":"tomcat7-admin-webapps","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0.59-51_patch_01.ep7.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:3.0::el7","package":"tomcat7-docs-webapp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0.59-51_patch_01.ep7.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:3.0::el7","package":"tomcat7-el-2.2-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0.59-51_patch_01.ep7.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:3.0::el7","package":"tomcat7-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0.59-51_patch_01.ep7.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:3.0::el7","package":"tomcat7-jsp-2.2-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0.59-51_patch_01.ep7.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:3.0::el7","package":"tomcat7-lib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0.59-51_patch_01.ep7.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:3.0::el7","package":"tomcat7-log4j","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0.59-51_patch_01.ep7.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:3.0::el7","package":"tomcat7-servlet-3.0-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0.59-51_patch_01.ep7.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:3.0::el7","package":"tomcat7-webapps","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0.59-51_patch_01.ep7.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:3.0::el7","package":"tomcat8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0.18-62_patch_01.ep7.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:3.0::el7","package":"tomcat8-admin-webapps","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0.18-62_patch_01.ep7.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:3.0::el7","package":"tomcat8-docs-webapp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0.18-62_patch_01.ep7.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:3.0::el7","package":"tomcat8-el-2.2-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0.18-62_patch_01.ep7.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:3.0::el7","package":"tomcat8-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0.18-62_patch_01.ep7.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:3.0::el7","package":"tomcat8-jsp-2.3-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0.18-62_patch_01.ep7.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:3.0::el7","package":"tomcat8-lib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0.18-62_patch_01.ep7.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:3.0::el7","package":"tomcat8-log4j","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0.18-62_patch_01.ep7.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:3.0::el7","package":"tomcat8-servlet-3.1-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0.18-62_patch_01.ep7.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:3.0::el7","package":"tomcat8-webapps","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0.18-62_patch_01.ep7.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:3.0::el6","package":"httpd24","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-62.ep7.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:3.0::el6","package":"httpd24-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-62.ep7.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:3.0::el6","package":"httpd24-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-62.ep7.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:3.0::el6","package":"httpd24-manual","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-62.ep7.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:3.0::el6","package":"httpd24-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-62.ep7.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:3.0::el6","package":"mod_ldap24","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-62.ep7.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:3.0::el6","package":"mod_proxy24_html","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.6-62.ep7.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:3.0::el6","package":"mod_session24","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-62.ep7.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:3.0::el6","package":"mod_ssl24","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.6-62.ep7.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:3.0::el6","package":"tomcat7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0.59-51_patch_01.ep7.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:3.0::el6","package":"tomcat7-admin-webapps","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0.59-51_patch_01.ep7.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:3.0::el6","package":"tomcat7-docs-webapp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0.59-51_patch_01.ep7.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:3.0::el6","package":"tomcat7-el-2.2-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0.59-51_patch_01.ep7.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:3.0::el6","package":"tomcat7-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0.59-51_patch_01.ep7.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:3.0::el6","package":"tomcat7-jsp-2.2-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0.59-51_patch_01.ep7.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:3.0::el6","package":"tomcat7-lib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0.59-51_patch_01.ep7.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:3.0::el6","package":"tomcat7-log4j","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0.59-51_patch_01.ep7.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:3.0::el6","package":"tomcat7-servlet-3.0-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0.59-51_patch_01.ep7.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:3.0::el6","package":"tomcat7-webapps","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0.59-51_patch_01.ep7.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:3.0::el6","package":"tomcat8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0.18-62_patch_01.ep7.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:3.0::el6","package":"tomcat8-admin-webapps","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0.18-62_patch_01.ep7.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:3.0::el6","package":"tomcat8-docs-webapp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0.18-62_patch_01.ep7.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:3.0::el6","package":"tomcat8-el-2.2-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0.18-62_patch_01.ep7.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:3.0::el6","package":"tomcat8-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0.18-62_patch_01.ep7.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:3.0::el6","package":"tomcat8-jsp-2.3-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0.18-62_patch_01.ep7.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:3.0::el6","package":"tomcat8-lib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0.18-62_patch_01.ep7.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:3.0::el6","package":"tomcat8-log4j","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0.18-62_patch_01.ep7.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:3.0::el6","package":"tomcat8-servlet-3.1-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0.18-62_patch_01.ep7.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:3.0::el6","package":"tomcat8-webapps","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0.18-62_patch_01.ep7.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:2::el7","package":"httpd22","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.26-56.ep6.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:2::el7","package":"httpd22-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.26-56.ep6.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:2::el7","package":"httpd22-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.26-56.ep6.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:2::el7","package":"httpd22-manual","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.26-56.ep6.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:2::el7","package":"httpd22-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.26-56.ep6.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:2::el7","package":"jbcs-httpd24","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1-3.jbcs.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:2::el7","package":"jbcs-httpd24-openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.2h-4.jbcs.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:2::el7","package":"jbcs-httpd24-openssl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.2h-4.jbcs.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:2::el7","package":"jbcs-httpd24-openssl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.2h-4.jbcs.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:2::el7","package":"jbcs-httpd24-openssl-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.2h-4.jbcs.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:2::el7","package":"jbcs-httpd24-openssl-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.2h-4.jbcs.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:2::el7","package":"jbcs-httpd24-openssl-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.2h-4.jbcs.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:2::el7","package":"jbcs-httpd24-runtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1-3.jbcs.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:2::el7","package":"mod_cluster","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.13-1.Final_redhat_1.1.ep6.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:2::el7","package":"mod_cluster-native","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.13-3.Final_redhat_2.ep6.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:2::el7","package":"mod_cluster-native-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.13-3.Final_redhat_2.ep6.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:2::el7","package":"mod_cluster-tomcat6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.13-1.Final_redhat_1.1.ep6.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:2::el7","package":"mod_cluster-tomcat7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.13-1.Final_redhat_1.1.ep6.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:2::el7","package":"mod_jk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.41-2.redhat_3.ep6.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:2::el7","package":"mod_jk-ap22","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.41-2.redhat_3.ep6.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:2::el7","package":"mod_jk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.41-2.redhat_3.ep6.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:2::el7","package":"mod_jk-manual","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.41-2.redhat_3.ep6.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:2::el7","package":"mod_ssl22","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.2.26-56.ep6.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:2::el7","package":"tomcat-native","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.34-5.redhat_1.ep6.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:2::el7","package":"tomcat-native-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.34-5.redhat_1.ep6.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:2::el6","package":"httpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.26-54.ep6.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:2::el6","package":"httpd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.26-54.ep6.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:2::el6","package":"httpd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.26-54.ep6.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:2::el6","package":"httpd-manual","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.26-54.ep6.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:2::el6","package":"httpd-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.26-54.ep6.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:2::el6","package":"jbcs-httpd24","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1-3.jbcs.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:2::el6","package":"jbcs-httpd24-openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.2h-4.jbcs.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:2::el6","package":"jbcs-httpd24-openssl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.2h-4.jbcs.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:2::el6","package":"jbcs-httpd24-openssl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.2h-4.jbcs.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:2::el6","package":"jbcs-httpd24-openssl-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.2h-4.jbcs.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:2::el6","package":"jbcs-httpd24-openssl-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.2h-4.jbcs.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:2::el6","package":"jbcs-httpd24-openssl-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.2h-4.jbcs.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:2::el6","package":"jbcs-httpd24-runtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1-3.jbcs.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:2::el6","package":"mod_cluster","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.13-1.Final_redhat_1.1.ep6.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:2::el6","package":"mod_cluster-native","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.13-3.Final_redhat_2.ep6.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:2::el6","package":"mod_cluster-native-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.13-3.Final_redhat_2.ep6.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:2::el6","package":"mod_cluster-tomcat6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.13-1.Final_redhat_1.1.ep6.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:2::el6","package":"mod_cluster-tomcat7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.13-1.Final_redhat_1.1.ep6.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:2::el6","package":"mod_jk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.41-2.redhat_3.ep6.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:2::el6","package":"mod_jk-ap22","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.41-2.redhat_3.ep6.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:2::el6","package":"mod_jk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.41-2.redhat_3.ep6.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:2::el6","package":"mod_jk-manual","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.41-2.redhat_3.ep6.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:2::el6","package":"mod_ssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.2.26-54.ep6.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:2::el6","package":"tomcat-native","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.34-5.redhat_1.ep6.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:2::el6","package":"tomcat-native-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.34-5.redhat_1.ep6.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el6","package":"jbcs-httpd24-httpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-77.SP1.jbcs.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el6","package":"jbcs-httpd24-httpd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-77.SP1.jbcs.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el6","package":"jbcs-httpd24-httpd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-77.SP1.jbcs.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el6","package":"jbcs-httpd24-httpd-manual","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-77.SP1.jbcs.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el6","package":"jbcs-httpd24-httpd-src-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-77.SP1.jbcs.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el6","package":"jbcs-httpd24-httpd-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-77.SP1.jbcs.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el6","package":"jbcs-httpd24-httpd-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-77.SP1.jbcs.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el6","package":"jbcs-httpd24-mod_ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-77.SP1.jbcs.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el6","package":"jbcs-httpd24-mod_proxy_html","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.6-77.SP1.jbcs.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el6","package":"jbcs-httpd24-mod_session","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-77.SP1.jbcs.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el6","package":"jbcs-httpd24-mod_ssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.6-77.SP1.jbcs.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-httpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-77.SP1.jbcs.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-httpd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-77.SP1.jbcs.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-httpd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-77.SP1.jbcs.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-httpd-manual","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-77.SP1.jbcs.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-httpd-src-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-77.SP1.jbcs.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-httpd-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-77.SP1.jbcs.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-httpd-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-77.SP1.jbcs.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-mod_ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-77.SP1.jbcs.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-mod_proxy_html","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.6-77.SP1.jbcs.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-mod_session","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-77.SP1.jbcs.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-mod_ssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.6-77.SP1.jbcs.el7"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP1","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.16-7.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.16-7.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.16-7.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 11 SP4","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.12-64.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.12-64.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.12-64.1"}]}]},{"source":"osv","ecosystem":"SUSE:Studio Onsite 1.3","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.12-64.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.10-14.17.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12-LTSS","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.10-14.17.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.7-1ubuntu4.13"}]}],"versions":["2.4.6-2ubuntu2","2.4.6-2ubuntu3","2.4.6-2ubuntu4","2.4.7-1ubuntu1","2.4.7-1ubuntu2","2.4.7-1ubuntu3","2.4.7-1ubuntu4","2.4.7-1ubuntu4.1","2.4.7-1ubuntu4.4","2.4.7-1ubuntu4.5","2.4.7-1ubuntu4.6","2.4.7-1ubuntu4.7","2.4.7-1ubuntu4.8","2.4.7-1ubuntu4.9","2.4.7-1ubuntu4.10","2.4.7-1ubuntu4.11"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.18-2ubuntu3.1"}]}],"versions":["2.4.12-2ubuntu2","2.4.17-1ubuntu1","2.4.17-2ubuntu1","2.4.17-3ubuntu1","2.4.18-1ubuntu1","2.4.18-2ubuntu1","2.4.18-2ubuntu2","2.4.18-2ubuntu3"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.7-1ubuntu4.13"}]}],"versions":["2.4.6-2ubuntu2","2.4.6-2ubuntu3","2.4.6-2ubuntu4","2.4.7-1ubuntu1","2.4.7-1ubuntu2","2.4.7-1ubuntu3","2.4.7-1ubuntu4","2.4.7-1ubuntu4.1","2.4.7-1ubuntu4.4","2.4.7-1ubuntu4.5","2.4.7-1ubuntu4.6","2.4.7-1ubuntu4.7","2.4.7-1ubuntu4.8","2.4.7-1ubuntu4.9","2.4.7-1ubuntu4.10","2.4.7-1ubuntu4.11"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.18-2ubuntu3.1"}]}],"versions":["2.4.12-2ubuntu2","2.4.17-1ubuntu1","2.4.17-2ubuntu1","2.4.17-3ubuntu1","2.4.18-1ubuntu1","2.4.18-2ubuntu1","2.4.18-2ubuntu2","2.4.18-2ubuntu3"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.49-1.1"}]}],"bundled":27}],"products":[{"vendor":"apache","product":"http_server"},{"vendor":"canonical","product":"ubuntu_linux"},{"vendor":"debian","product":"debian_linux"},{"vendor":"fedoraproject","product":"fedora"},{"vendor":"hp","product":"system_management_homepage"},{"vendor":"opensuse","product":"leap"},{"vendor":"opensuse","product":"opensuse"},{"vendor":"oracle","product":"communications_user_data_repository"},{"vendor":"oracle","product":"enterprise_manager_ops_center"},{"vendor":"oracle","product":"linux"},{"vendor":"oracle","product":"solaris"},{"vendor":"redhat","product":"enterprise_linux_desktop"},{"vendor":"redhat","product":"enterprise_linux_eus"},{"vendor":"redhat","product":"enterprise_linux_server"},{"vendor":"redhat","product":"enterprise_linux_server_aus"},{"vendor":"redhat","product":"enterprise_linux_server_tus"},{"vendor":"redhat","product":"enterprise_linux_workstation"},{"vendor":"redhat","product":"jboss_core_services"},{"vendor":"redhat","product":"jboss_enterprise_web_server"},{"vendor":"redhat","product":"jboss_web_server"}],"references":[{"url":"http://www.securitytracker.com/id/1036330","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","Broken Link","Third Party Advisory","VDB Entry","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2016:1420","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2016:1635","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://support.apple.com/HT208221","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05320149","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"http://www.securityfocus.com/bid/91816","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2016:1851","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3038-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory","advisory"]},{"url":"http://www.kb.cert.org/vuls/id/797896","tags":["third-party-advisory","x_refsource_CERT-VN","x_transferred","Third Party Advisory","US Government Resource","advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html","tags":["x_refsource_CONFIRM","x_transferred","Patch","Third Party Advisory","fix"]},{"url":"http://lists.opensuse.org/opensuse-updates/2016-07/msg00059.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1648.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://www.tenable.com/security/tns-2017-04","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1625.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Broken Link","Third Party Advisory","advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3623","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Third Party Advisory","advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1649.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbhf03770en_us","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2016:1422","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinoct2016-3090566.html","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2016:1421","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6WCTE7443AYZ4EGELWLVNANA2WJCJIYI/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1650.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Broken Link","Third Party Advisory","advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1624.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Broken Link","Third Party Advisory","advisory"]},{"url":"https://www.apache.org/security/asf-httpoxy-response.txt","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory","advisory","article","report"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TGNHXJJSWDXAOEYH5TMXDPQVJMQQJOAZ/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://httpoxy.org/","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","advisory","web","article","report"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html","tags":["x_refsource_CONFIRM","x_transferred","Patch","Third Party Advisory","fix"]},{"url":"https://security.gentoo.org/glsa/201701-36","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","Third Party Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2016:1636","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NEKZAB7MTWVSMORHTEMCQNFFMIHCYF76/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QPQAPWQA774JPDRV4UIB2SZAX6D3UZCV/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/re1e3a24664d35bcd0a0e793e0b5fc6ca6c107f99a1b2c545c5d4b467%40%3Ccvs.httpd.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/r04e89e873d54116a0635ef2f7061c15acc5ed27ef7500997beb65d6f%40%3Ccvs.httpd.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/rcc44594d4d6579b90deccd4536b5d31f099ef563df39b094be286b9e%40%3Ccvs.httpd.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/rb14daf9cc4e28d18cdc15d6a6ca74e565672fabf7ad89541071d008b%40%3Ccvs.httpd.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/rad01d817195e6cc871cb1d73b207ca326379a20a6e7f30febaf56d24%40%3Ccvs.httpd.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/rd336919f655b7ff309385e34a143e41c503e133da80414485b3abcc9%40%3Ccvs.httpd.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/r476d175be0aaf4a17680ef98c5153b4d336eaef76fb2224cc94c463a%40%3Ccvs.httpd.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-5387","tags":["advisory"]},{"url":"https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba@%3Ccvs.httpd.apache.org%3E"},{"url":"https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830@%3Ccvs.httpd.apache.org%3E"},{"url":"https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f@%3Ccvs.httpd.apache.org%3E"},{"url":"https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53@%3Ccvs.httpd.apache.org%3E"},{"url":"https://lists.apache.org/thread.html/r04e89e873d54116a0635ef2f7061c15acc5ed27ef7500997beb65d6f@%3Ccvs.httpd.apache.org%3E"},{"url":"https://lists.apache.org/thread.html/r476d175be0aaf4a17680ef98c5153b4d336eaef76fb2224cc94c463a@%3Ccvs.httpd.apache.org%3E"},{"url":"https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7@%3Ccvs.httpd.apache.org%3E"},{"url":"https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f@%3Ccvs.httpd.apache.org%3E"},{"url":"https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b@%3Ccvs.httpd.apache.org%3E"},{"url":"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920@%3Ccvs.httpd.apache.org%3E"},{"url":"https://lists.apache.org/thread.html/rad01d817195e6cc871cb1d73b207ca326379a20a6e7f30febaf56d24@%3Ccvs.httpd.apache.org%3E"},{"url":"https://lists.apache.org/thread.html/rb14daf9cc4e28d18cdc15d6a6ca74e565672fabf7ad89541071d008b@%3Ccvs.httpd.apache.org%3E"},{"url":"https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a@%3Ccvs.httpd.apache.org%3E"},{"url":"https://lists.apache.org/thread.html/rcc44594d4d6579b90deccd4536b5d31f099ef563df39b094be286b9e@%3Ccvs.httpd.apache.org%3E"},{"url":"https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f@%3Ccvs.httpd.apache.org%3E"},{"url":"https://lists.apache.org/thread.html/rd336919f655b7ff309385e34a143e41c503e133da80414485b3abcc9@%3Ccvs.httpd.apache.org%3E"},{"url":"https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064@%3Ccvs.httpd.apache.org%3E"},{"url":"https://lists.apache.org/thread.html/re1e3a24664d35bcd0a0e793e0b5fc6ca6c107f99a1b2c545c5d4b467@%3Ccvs.httpd.apache.org%3E"},{"url":"https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234@%3Ccvs.httpd.apache.org%3E"},{"url":"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9@%3Ccvs.httpd.apache.org%3E"},{"url":"https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b@%3Ccvs.httpd.apache.org%3E"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6WCTE7443AYZ4EGELWLVNANA2WJCJIYI"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NEKZAB7MTWVSMORHTEMCQNFFMIHCYF76"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QPQAPWQA774JPDRV4UIB2SZAX6D3UZCV"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TGNHXJJSWDXAOEYH5TMXDPQVJMQQJOAZ"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6WCTE7443AYZ4EGELWLVNANA2WJCJIYI"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NEKZAB7MTWVSMORHTEMCQNFFMIHCYF76"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QPQAPWQA774JPDRV4UIB2SZAX6D3UZCV"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TGNHXJJSWDXAOEYH5TMXDPQVJMQQJOAZ"},{"url":"https://httpoxy.org"},{"url":"https://github.com/advisories/GHSA-9hqr-6p2v-pfp2"},{"url":"https://security.alpinelinux.org/vuln/CVE-2016-5387","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2016-5387","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2016-0262.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=18991","tags":["report"]},{"url":"https://access.redhat.com/security/vulnerabilities/httpoxy","tags":["web","article"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1422.html","tags":["web"]},{"url":"https://advisories.mageia.org/MGASA-2017-0146.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=19168","tags":["report"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QPQAPWQA774JPDRV4UIB2SZAX6D3UZCV/","tags":["web"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://access.redhat.com/solutions/2435501","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1352476","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1353755","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_1420.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-4979","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-4979","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-4979","tags":["advisory"]},{"url":"http://httpd.apache.org/security/vulnerabilities_24.html#2.4.23","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-5387","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-5387","tags":["advisory","report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_1421.json","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1347648","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1353269","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_1422.json","tags":["advisory"]},{"url":"https://access.redhat.com/documentation/en-US/Red_Hat_JBoss_Web_Server/3/html-single/3.0.3_Release_Notes/index.html","tags":["article"]},{"url":"https://access.redhat.com/solutions/2435491","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1353809","tags":["report"]},{"url":"https://issues.redhat.com/browse/JWS-483","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_1635.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-5388","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-5388","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-5388","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_1636.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2016:1648","tags":["advisory"]},{"url":"https://access.redhat.com/documentation/en-US/Red_Hat_JBoss_Web_Server/2.1/html/2.1.1_Release_Notes/index.html","tags":["article"]},{"url":"https://access.redhat.com/site/documentation/","tags":["article"]},{"url":"https://access.redhat.com/site/documentation/en-US/JBoss_Enterprise_Web_Server/2/html-single/Installation_Guide/index.html","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1326320","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1331441","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1331536","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1337155","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1337397","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1338646","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1358118","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_1648.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-2105","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-2105","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-2105","tags":["advisory"]},{"url":"https://openssl.org/news/secadv/20160503.txt","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-2106","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-2106","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-2106","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-3110","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-3110","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-3110","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2016:1649","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1337396","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1366541","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_1649.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_1851.json","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2016/suse-su-20161818-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/988488","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5387","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2016/suse-su-20161819-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2016/suse-su-20162090-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/951692","tags":["report"]},{"url":"https://bugzilla.suse.com/970391","tags":["report"]},{"url":"https://bugzilla.suse.com/973381","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-5387","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-3038-1","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2005-3352","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2005-3357","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2006-3747","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2006-5752","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-1862","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-1863","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-3304","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-3847","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-4465","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-5000","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-6388","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-6420","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-6421","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-6422","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-0005","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-1678","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-2364","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-2939","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-8740","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-9798","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-10081","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-10082","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-10092","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-10097","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-10098","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9517","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2016-5387","description":"The Apache HTTP Server through 2.4.23 follows RFC 3875 section 4.1.18 and therefore does not protect applications from the presence of untrusted client data in the HTTP_PROXY environment variable, which might allow remote attackers to redirect an application's outbound HTTP traffic to an arbitrary proxy server via a crafted Proxy header in an HTTP request, aka an \"httpoxy\" issue.  NOTE: the vendor states \"This mitigation has been assigned the identifier CVE-2016-5387\"; in other words, this is not a CVE ID for a vulnerability.","status":"published","published":"2016-07-19T01:00:00Z","modified":"2024-08-06T01:00:59.995Z","updated_at":"2026-11-02T14:33:30.767029Z"}],"euvd":[{"id":"EUVD-2016-6337","description":"The Apache HTTP Server through 2.4.23 follows RFC 3875 section 4.1.18 and therefore does not protect applications from the presence of untrusted client data in the HTTP_PROXY environment variable, which might allow remote attackers to redirect an application's outbound HTTP traffic to an arbitrary proxy server via a crafted Proxy header in an HTTP request, aka an \"httpoxy\" issue.  NOTE: the vendor states \"This mitigation has been assigned the identifier CVE-2016-5387\"; in other words, this is not a CVE ID for a vulnerability.","status":"published","published":"2016-07-19T01:00:00Z","modified":"2024-08-06T01:00:59Z","updated_at":"2026-11-03T02:22:42.442421Z"}],"ghsa":[{"id":"GHSA-9hqr-6p2v-pfp2","title":"The Apache HTTP Server through 2.4.23 follows RFC 3875 section 4.1.18 and therefore does not...","description":"The Apache HTTP Server through 2.4.23 follows RFC 3875 section 4.1.18 and therefore does not protect applications from the presence of untrusted client data in the HTTP_PROXY environment variable, which might allow remote attackers to redirect an application's outbound HTTP traffic to an arbitrary proxy server via a crafted Proxy header in an HTTP request, aka an \"httpoxy\" issue.  NOTE: the vendor states \"This mitigation has been assigned the identifier CVE-2016-5387\"; in other words, this is not a CVE ID for a vulnerability.","status":"published","published":"2022-05-13T01:09:43Z","modified":"2025-04-12T13:03:31Z","cvss":[{"version":"3.0","score":8.1,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-284"],"updated_at":"2026-11-02T15:01:28.663035Z"}],"nvd":[{"id":"CVE-2016-5387","description":"The Apache HTTP Server through 2.4.23 follows RFC 3875 section 4.1.18 and therefore does not protect applications from the presence of untrusted client data in the HTTP_PROXY environment variable, which might allow remote attackers to redirect an application's outbound HTTP traffic to an arbitrary proxy server via a crafted Proxy header in an HTTP request, aka an \"httpoxy\" issue.  NOTE: the vendor states \"This mitigation has been assigned the identifier CVE-2016-5387\"; in other words, this is not a CVE ID for a vulnerability.","status":"published","published":"2016-07-19T02:00:19.837Z","modified":"2026-06-17T00:49:18.75Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:03:27.736698Z"}],"osv":[{"id":"ALPINE-CVE-2016-5387","description":"The Apache HTTP Server through 2.4.23 follows RFC 3875 section 4.1.18 and therefore does not protect applications from the presence of untrusted client data in the HTTP_PROXY environment variable, which might allow remote attackers to redirect an application's outbound HTTP traffic to an arbitrary proxy server via a crafted Proxy header in an HTTP request, aka an \"httpoxy\" issue.  NOTE: the vendor states \"This mitigation has been assigned the identifier CVE-2016-5387\"; in other words, this is not a CVE ID for a vulnerability.","status":"published","published":"2016-07-19T02:00:19.837Z","modified":"2026-09-22T06:30:29.466330173Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:27:46.318571Z"},{"id":"CVE-2016-5387","description":"The Apache HTTP Server through 2.4.23 follows RFC 3875 section 4.1.18 and therefore does not protect applications from the presence of untrusted client data in the HTTP_PROXY environment variable, which might allow remote attackers to redirect an application's outbound HTTP traffic to an arbitrary proxy server via a crafted Proxy header in an HTTP request, aka an \"httpoxy\" issue.  NOTE: the vendor states \"This mitigation has been assigned the identifier CVE-2016-5387\"; in other words, this is not a CVE ID for a vulnerability.","status":"published","published":"2016-07-19T02:00:19.837Z","modified":"2026-10-24T10:30:27.976368798Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:02.776224Z"},{"id":"DEBIAN-CVE-2016-5387","description":"The Apache HTTP Server through 2.4.23 follows RFC 3875 section 4.1.18 and therefore does not protect applications from the presence of untrusted client data in the HTTP_PROXY environment variable, which might allow remote attackers to redirect an application's outbound HTTP traffic to an arbitrary proxy server via a crafted Proxy header in an HTTP request, aka an \"httpoxy\" issue.  NOTE: the vendor states \"This mitigation has been assigned the identifier CVE-2016-5387\"; in other words, this is not a CVE ID for a vulnerability.","status":"published","published":"2016-07-19T02:00:19.837Z","modified":"2026-09-22T07:01:29.225315998Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:27.910042Z"},{"id":"RHSA-2016:1420","title":"Red Hat Security Advisory: httpd24-httpd security update","status":"published","published":"2024-09-13T11:04:45Z","modified":"2026-09-21T10:01:23Z","cvss":[{"version":"3.0","score":9.1,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"critical"}],"updated_at":"2026-11-02T15:53:03.734507Z"},{"id":"RHSA-2016:1421","title":"Red Hat Security Advisory: httpd security update","status":"published","published":"2024-09-13T11:04:34Z","modified":"2026-09-21T10:01:24Z","cvss":[{"version":"3.0","score":5,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:03.734507Z"},{"id":"RHSA-2016:1422","title":"Red Hat Security Advisory: httpd security and bug fix update","status":"published","published":"2024-09-13T11:04:24Z","modified":"2026-09-21T10:01:24Z","cvss":[{"version":"3.0","score":5,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:03.734507Z"},{"id":"RHSA-2016:1635","title":"Red Hat Security Advisory: Red Hat JBoss Web Server 3.0.3 Service Pack 1 security update","status":"published","published":"2024-09-15T23:31:38Z","modified":"2026-09-21T10:01:26Z","cvss":[{"version":"3.0","score":5,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:03.734507Z"},{"id":"RHSA-2016:1636","title":"Red Hat Security Advisory: Red Hat JBoss Web Server 3.0.3 Service Pack 1 security update","status":"published","published":"2024-09-15T23:31:42Z","modified":"2026-09-21T10:01:26Z","cvss":[{"version":"3.0","score":5,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:03.734507Z"},{"id":"RHSA-2016:1648","title":"Red Hat Security Advisory: Red Hat JBoss Web Server 2.1.1 security update on RHEL 7","status":"published","published":"2024-09-15T23:25:01Z","modified":"2026-09-21T10:01:27Z","cvss":[{"version":"3.0","score":5.6,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T15:53:03.734507Z"},{"id":"RHSA-2016:1649","title":"Red Hat Security Advisory: Red Hat JBoss Web Server 2.1.1 security update on RHEL 6","status":"published","published":"2024-09-15T23:25:07Z","modified":"2026-09-21T10:01:27Z","cvss":[{"version":"3.0","score":5.6,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T15:53:03.734507Z"},{"id":"RHSA-2016:1851","title":"Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP 2.4.6 Service Pack 1 security update","status":"published","published":"2024-09-13T11:04:52Z","modified":"2026-09-21T10:01:28Z","cvss":[{"version":"3.0","score":5,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:03.734507Z"},{"id":"UBUNTU-CVE-2016-5387","description":"The Apache HTTP Server through 2.4.23 follows RFC 3875 section 4.1.18 and therefore does not protect applications from the presence of untrusted client data in the HTTP_PROXY environment variable, which might allow remote attackers to redirect an application's outbound HTTP traffic to an arbitrary proxy server via a crafted Proxy header in an HTTP request, aka an \"httpoxy\" issue.  NOTE: the vendor states \"This mitigation has been assigned the identifier CVE-2016-5387\"; in other words, this is not a CVE ID for a vulnerability.","status":"published","published":"2016-07-18T14:00:00Z","modified":"2026-04-22T10:51:38.307856Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"},{"version":"3.0","score":8.1,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:12.642042Z"},{"id":"DLA-553-1","title":"apache2 - security update","status":"published","published":"2016-07-20T00:00:00Z","modified":"2026-03-09T02:10:12.785317Z","updated_at":"2026-11-02T15:46:13.207219Z"},{"id":"DSA-3623-1","title":"apache2 - security update","status":"published","published":"2016-07-20T00:00:00Z","modified":"2026-03-09T01:19:40.427177Z","updated_at":"2026-11-02T15:46:16.199525Z"},{"id":"MGASA-2016-0262","title":"Updated apache packages fix security vulnerability","description":"It was discovered that httpd used the value of the Proxy header from HTTP\nrequests to initialize the HTTP_PROXY environment variable for CGI\nscripts, which in turn was incorrectly used by certain HTTP client\nimplementations to configure the proxy for outgoing HTTP requests. A\nremote attacker could possibly use this flaw to redirect HTTP requests\nperformed by a CGI script to an attacker-controlled proxy via a malicious\nHTTP request (CVE-2016-5387).\n","status":"published","published":"2016-07-26T21:16:28Z","modified":"2026-04-16T06:24:15.915893005Z","updated_at":"2026-11-02T15:49:40.103088Z"},{"id":"MGASA-2017-0146","title":"Updated perl-CGI-Emulate-PSGI packages fix security vulnerability","description":"This update removes the setting of the HTTP_PROXY environment value. This\nworks around the httproxy vulnerability (aka CVE-2016-5387)\n","status":"published","published":"2017-05-26T06:54:58Z","modified":"2026-04-16T06:23:20.339580376Z","updated_at":"2026-11-02T15:49:40.103088Z"},{"id":"openSUSE-SU-2024:10623-1","title":"apache2-2.4.49-1.1 on GA media","description":"These are all security issues fixed in the apache2-2.4.49-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:38:12.808287Z","updated_at":"2026-11-02T16:58:34.487567Z"},{"id":"SUSE-SU-2016:1818-1","title":"Security update for apache2","description":"\nThis update for apache2 fixes the following issues:\n\n* It used to be possible to set an arbitrary $HTTP_PROXY environment variable\n  for request handlers -- like CGI scripts -- by including a specially crafted\n  HTTP header in the request (CVE-2016-5387). As a result, these server\n  components would potentially direct all their outgoing HTTP traffic through a\n  malicious proxy server. This patch fixes the issue: the updated Apache server\n  ignores such HTTP headers and never sets $HTTP_PROXY for sub-processes\n  (unless a value has been explicitly configured by the administrator in the\n  configuration file). (bsc#988488)\n","status":"published","published":"2016-07-18T14:06:44Z","modified":"2025-05-02T04:05:24.244197Z","updated_at":"2026-11-02T15:53:43.438985Z"},{"id":"SUSE-SU-2016:1819-1","title":"Security update for apache2","description":"\nThis update for apache2 fixes the following issues:\n\n* It used to be possible to set an arbitrary $HTTP_PROXY environment variable\n  for request handlers -- like CGI scripts -- by including a specially crafted\n  HTTP header in the request (CVE-2016-5387). As a result, these server\n  components would potentially direct all their outgoing HTTP traffic through a\n  malicious proxy server. This patch fixes the issue: the updated Apache server\n  ignores such HTTP headers and never sets $HTTP_PROXY for sub-processes\n  (unless a value has been explicitly configured by the administrator in the\n  configuration file). (bsc#988488)\n","status":"published","published":"2016-07-18T14:07:52Z","modified":"2026-02-04T04:05:37.710848Z","updated_at":"2026-11-02T15:53:43.438985Z"},{"id":"SUSE-SU-2016:2090-1","title":"Security update for apache2","description":"\nThis update for apache2 fixes the following issues:\n\n- It used to be possible to set an arbitrary $HTTP_PROXY environment variable for\n  request handlers -- like CGI scripts -- by including a specially crafted HTTP\n  header in the request (CVE-2016-5387). As a result, these server components\n  would potentially direct all their outgoing HTTP traffic through a malicious\n  proxy server. This patch fixes the issue: the updated Apache server ignores\n  such HTTP headers and never sets $HTTP_PROXY for sub-processes (unless a value\n  has been explicitly configured by the administrator in the configuration file).\n  (bsc#988488)\n\n- Ignore SIGINT signal in child processes. This fixes a race condition in\n  signals handling when httpd is running on foreground and the user hits ctrl+c.\n  (bsc#970391)\n\n- Don't put the backend in error state (by default) when 500/503 is overridden.\n  (bsc#951692)\n\n- Remove obsolete /usr/share/apache2/rc.apache2 sample script. (bsc#973381)\n","status":"published","published":"2016-08-17T07:33:22Z","modified":"2026-02-04T03:53:15.332556Z","updated_at":"2026-11-02T15:53:43.438985Z"},{"id":"USN-3038-1","title":"apache2 vulnerability","description":"It was discovered that the Apache HTTP Server would set the HTTP_PROXY\nenvironment variable based on the contents of the Proxy header from HTTP\nrequests. A remote attacker could possibly use this issue in combination\nwith CGI scripts that honour the HTTP_PROXY variable to redirect outgoing\nHTTP requests.\n","status":"published","published":"2016-07-18T18:04:48Z","modified":"2026-04-22T09:26:18.74794Z","updated_at":"2026-11-02T16:58:10.303275Z"}]}}