{"id":"CVE-2017-3169","aliases":["ALPINE-CVE-2017-3169","BELL-CVE-2017-3169","DEBIAN-CVE-2017-3169","DLA-1009-1","DSA-3896-1","EUVD-2017-12295","GHSA-p3gj-wq33-qg67","MGASA-2018-0007","RHSA-2017:2478","RHSA-2017:2479","RHSA-2017:2483","RHSA-2017:3193","RHSA-2017:3194","RHSA-2017:3195","RHSA-2017:3476","RHSA-2017:3477","SUSE-SU-2017:1714-1","SUSE-SU-2017:2449-1","SUSE-SU-2017:2756-1","SUSE-SU-2017:2907-1","UBUNTU-CVE-2017-3169","USN-3340-1"],"status":"published","title":"In Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, mod_ssl may dereference a NULL...","description":"In Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, mod_ssl may dereference a NULL pointer when third-party modules call ap_hook_process_connection() during an HTTP request to an HTTPS port.","severity":{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.19953,"percentile":0.9745,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-476"],"published":"2017-06-19T00:00:00Z","modified":"2026-10-24T10:30:15Z","fixes":[{"ecosystem":"Alpine:v3.10","package":"apache2","fixed_in":["2.4.26-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.11","package":"apache2","fixed_in":["2.4.26-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.12","package":"apache2","fixed_in":["2.4.26-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.13","package":"apache2","fixed_in":["2.4.26-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"apache2","fixed_in":["2.4.26-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"apache2","fixed_in":["2.4.26-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"apache2","fixed_in":["2.4.26-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"apache2","fixed_in":["2.4.26-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"apache2","fixed_in":["2.4.26-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"apache2","fixed_in":["2.4.26-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"apache2","fixed_in":["2.4.26-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"apache2","fixed_in":["2.4.26-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"apache2","fixed_in":["2.4.26-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"apache2","fixed_in":["2.4.26-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"apache2","fixed_in":["2.4.26-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.3","package":"apache2","fixed_in":["2.4.26-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.4","package":"apache2","fixed_in":["2.4.26-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.5","package":"apache2","fixed_in":["2.4.26-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.6","package":"apache2","fixed_in":["2.4.26-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.7","package":"apache2","fixed_in":["2.4.26-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.8","package":"apache2","fixed_in":["2.4.26-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.9","package":"apache2","fixed_in":["2.4.26-r0"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"apache2","fixed_in":["2.4.25-4"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"apache2","fixed_in":["2.4.25-4"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"apache2","fixed_in":["2.4.25-4"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"apache2","fixed_in":["2.4.7-1ubuntu4.16"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"apache2","fixed_in":["2.4.18-2ubuntu3.3"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.10","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.26-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.11","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.26-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.12","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.26-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.13","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.26-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.26-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.26-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.26-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.26-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.26-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.26-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.26-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.26-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.26-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.26-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.26-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.3","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.26-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.4","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.26-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.5","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.26-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.6","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.26-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.7","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.26-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.8","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.26-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.9","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.26-r0"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.25-4"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.25-4"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.25-4"}]}]},{"source":"osv","ecosystem":"Debian:7","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.22-13+deb7u9"}]}],"versions":["2.2.22-13","2.2.22-13+deb7u1","2.2.22-13+deb7u2","2.2.22-13+deb7u3","2.2.22-13+deb7u4","2.2.22-13+deb7u5","2.2.22-13+deb7u6","2.2.22-13+deb7u7","2.2.22-13+deb7u8"],"bundled":4},{"source":"osv","ecosystem":"Debian:8","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.10-10+deb8u9"}]}],"versions":["2.4.10-10","2.4.10-10+deb8u1","2.4.10-10+deb8u2","2.4.10-10+deb8u3","2.4.10-10+deb8u4","2.4.10-10+deb8u5","2.4.10-10+deb8u6","2.4.10-10+deb8u7","2.4.10-10+deb8u8"],"bundled":4},{"source":"osv","ecosystem":"Debian:9","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.25-3+deb9u1"}]}],"versions":["2.4.25-3"],"bundled":4},{"source":"osv","ecosystem":"Mageia:5","package":"apache","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.10-16.7.mga5"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"httpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.15-60.el6_9.5"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"httpd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.15-60.el6_9.5"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"httpd-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.15-60.el6_9.5"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"httpd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.15-60.el6_9.5"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"httpd-manual","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.15-60.el6_9.5"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"mod_ssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.2.15-60.el6_9.5"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"httpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.15-60.el6_9.5"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"httpd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.15-60.el6_9.5"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"httpd-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.15-60.el6_9.5"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"httpd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.15-60.el6_9.5"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"httpd-manual","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.15-60.el6_9.5"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"mod_ssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.2.15-60.el6_9.5"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"httpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.15-60.el6_9.5"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"httpd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.15-60.el6_9.5"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"httpd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.15-60.el6_9.5"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"httpd-manual","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.15-60.el6_9.5"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"httpd-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.15-60.el6_9.5"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"mod_ssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.2.15-60.el6_9.5"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"httpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.15-60.el6_9.5"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"httpd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.15-60.el6_9.5"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"httpd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.15-60.el6_9.5"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"httpd-manual","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.15-60.el6_9.5"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"httpd-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.15-60.el6_9.5"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"mod_ssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.2.15-60.el6_9.5"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"httpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-67.el7_4.2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"httpd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-67.el7_4.2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"httpd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-67.el7_4.2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"httpd-manual","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-67.el7_4.2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"httpd-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-67.el7_4.2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"mod_ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-67.el7_4.2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"mod_proxy_html","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.6-67.el7_4.2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"mod_session","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-67.el7_4.2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"mod_ssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.6-67.el7_4.2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"httpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-67.el7_4.2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"httpd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-67.el7_4.2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"httpd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-67.el7_4.2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"httpd-manual","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-67.el7_4.2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"httpd-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-67.el7_4.2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"mod_ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-67.el7_4.2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"mod_proxy_html","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.6-67.el7_4.2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"mod_session","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-67.el7_4.2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"mod_ssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.6-67.el7_4.2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"httpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-67.el7_4.2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"httpd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-67.el7_4.2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"httpd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-67.el7_4.2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"httpd-manual","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-67.el7_4.2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"httpd-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-67.el7_4.2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"mod_session","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-67.el7_4.2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"mod_ssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.6-67.el7_4.2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"mod_ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-67.el7_4.2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"mod_proxy_html","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.6-67.el7_4.2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"httpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-67.el7_4.2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"httpd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-67.el7_4.2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"httpd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-67.el7_4.2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"httpd-manual","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-67.el7_4.2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"httpd-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-67.el7_4.2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"mod_session","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-67.el7_4.2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"mod_ssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.6-67.el7_4.2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"mod_ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-67.el7_4.2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"mod_proxy_html","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.6-67.el7_4.2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"httpd24-httpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.25-9.el6.1"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"httpd24-httpd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.25-9.el6.1"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"httpd24-httpd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.25-9.el6.1"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"httpd24-httpd-manual","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.25-9.el6.1"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"httpd24-httpd-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.25-9.el6.1"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"httpd24-mod_ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.25-9.el6.1"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"httpd24-mod_proxy_html","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.25-9.el6.1"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"httpd24-mod_session","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.25-9.el6.1"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"httpd24-mod_ssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.25-9.el6.1"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"httpd24-httpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.25-9.el7.1"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"httpd24-httpd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.25-9.el7.1"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"httpd24-httpd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.25-9.el7.1"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"httpd24-httpd-manual","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.25-9.el7.1"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"httpd24-httpd-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.25-9.el7.1"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"httpd24-mod_ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.25-9.el7.1"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"httpd24-mod_proxy_html","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.25-9.el7.1"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"httpd24-mod_session","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.25-9.el7.1"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"httpd24-mod_ssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.25-9.el7.1"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.2::computenode","package":"httpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-40.el7_2.6"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.2::computenode","package":"httpd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-40.el7_2.6"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.2::computenode","package":"httpd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-40.el7_2.6"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.2::computenode","package":"httpd-manual","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-40.el7_2.6"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.2::computenode","package":"httpd-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-40.el7_2.6"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.2::computenode","package":"mod_ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-40.el7_2.6"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.2::computenode","package":"mod_proxy_html","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.6-40.el7_2.6"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.2::computenode","package":"mod_session","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-40.el7_2.6"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.2::computenode","package":"mod_ssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.6-40.el7_2.6"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.2::server","package":"httpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-40.el7_2.6"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.2::server","package":"httpd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-40.el7_2.6"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.2::server","package":"httpd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-40.el7_2.6"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.2::server","package":"httpd-manual","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-40.el7_2.6"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.2::server","package":"httpd-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-40.el7_2.6"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.2::server","package":"mod_ssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.6-40.el7_2.6"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.2::server","package":"mod_ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-40.el7_2.6"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.2::server","package":"mod_proxy_html","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.6-40.el7_2.6"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.2::server","package":"mod_session","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-40.el7_2.6"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.3::computenode","package":"httpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-45.el7_3.5"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.3::computenode","package":"httpd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-45.el7_3.5"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.3::computenode","package":"httpd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-45.el7_3.5"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.3::computenode","package":"httpd-manual","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-45.el7_3.5"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.3::computenode","package":"httpd-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-45.el7_3.5"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.3::computenode","package":"mod_ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-45.el7_3.5"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.3::computenode","package":"mod_proxy_html","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.6-45.el7_3.5"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.3::computenode","package":"mod_session","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-45.el7_3.5"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.3::computenode","package":"mod_ssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.6-45.el7_3.5"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.3::server","package":"httpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-45.el7_3.5"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.3::server","package":"httpd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-45.el7_3.5"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.3::server","package":"httpd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-45.el7_3.5"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.3::server","package":"httpd-manual","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-45.el7_3.5"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.3::server","package":"httpd-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-45.el7_3.5"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.3::server","package":"mod_ssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.6-45.el7_3.5"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.3::server","package":"mod_ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-45.el7_3.5"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.3::server","package":"mod_proxy_html","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.6-45.el7_3.5"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.3::server","package":"mod_session","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-45.el7_3.5"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:6.7::computenode","package":"httpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.15-47.el6_7.5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:6.7::computenode","package":"httpd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.15-47.el6_7.5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:6.7::computenode","package":"httpd-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.15-47.el6_7.5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:6.7::computenode","package":"httpd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.15-47.el6_7.5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:6.7::computenode","package":"httpd-manual","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.15-47.el6_7.5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:6.7::computenode","package":"mod_ssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.2.15-47.el6_7.5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:6.7::server","package":"httpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.15-47.el6_7.5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:6.7::server","package":"httpd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.15-47.el6_7.5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:6.7::server","package":"httpd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.15-47.el6_7.5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:6.7::server","package":"httpd-manual","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.15-47.el6_7.5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:6.7::server","package":"httpd-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.15-47.el6_7.5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:6.7::server","package":"mod_ssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.2.15-47.el6_7.5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-httpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.23-125.jbcs.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-httpd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.23-125.jbcs.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-httpd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.23-125.jbcs.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-httpd-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.23-125.jbcs.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-httpd-manual","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.23-125.jbcs.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-httpd-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.23-125.jbcs.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-httpd-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.23-125.jbcs.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-mod_bmx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.6-15.GA.jbcs.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-mod_bmx-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.6-15.GA.jbcs.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-mod_cluster-native","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.8-1.Final_redhat_1.jbcs.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-mod_cluster-native-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.8-1.Final_redhat_1.jbcs.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-mod_ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.23-125.jbcs.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-mod_proxy_html","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.23-125.jbcs.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-mod_session","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.23-125.jbcs.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-mod_ssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.23-125.jbcs.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el6","package":"jbcs-httpd24-httpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.23-125.jbcs.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el6","package":"jbcs-httpd24-httpd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.23-125.jbcs.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el6","package":"jbcs-httpd24-httpd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.23-125.jbcs.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el6","package":"jbcs-httpd24-httpd-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.23-125.jbcs.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el6","package":"jbcs-httpd24-httpd-manual","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.23-125.jbcs.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el6","package":"jbcs-httpd24-httpd-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.23-125.jbcs.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el6","package":"jbcs-httpd24-httpd-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.23-125.jbcs.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el6","package":"jbcs-httpd24-mod_bmx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.6-15.GA.jbcs.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el6","package":"jbcs-httpd24-mod_bmx-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.6-15.GA.jbcs.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el6","package":"jbcs-httpd24-mod_cluster-native","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.8-1.Final_redhat_1.jbcs.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el6","package":"jbcs-httpd24-mod_cluster-native-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.8-1.Final_redhat_1.jbcs.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el6","package":"jbcs-httpd24-mod_ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.23-125.jbcs.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el6","package":"jbcs-httpd24-mod_proxy_html","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.23-125.jbcs.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el6","package":"jbcs-httpd24-mod_session","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.23-125.jbcs.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el6","package":"jbcs-httpd24-mod_ssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.23-125.jbcs.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.23-28.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP2","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.23-28.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.23-28.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.23-28.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 6","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.16-20.10.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.16-20.10.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1-LTSS","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.16-20.10.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12-LTSS","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.10-14.28.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 11 SP4","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.34-70.12.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Point of Sale 11 SP3","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.34-70.12.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-LTSS","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.34-70.12.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-TERADATA","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.34-70.12.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.34-70.12.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.34-70.12.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Studio Onsite 1.3","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.34-70.12.1"}]}],"bundled":9},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.7-1ubuntu4.16"}]}],"versions":["2.4.6-2ubuntu2","2.4.6-2ubuntu3","2.4.6-2ubuntu4","2.4.7-1ubuntu1","2.4.7-1ubuntu2","2.4.7-1ubuntu3","2.4.7-1ubuntu4","2.4.7-1ubuntu4.1","2.4.7-1ubuntu4.4","2.4.7-1ubuntu4.5","2.4.7-1ubuntu4.6","2.4.7-1ubuntu4.7","2.4.7-1ubuntu4.8","2.4.7-1ubuntu4.9","2.4.7-1ubuntu4.10","2.4.7-1ubuntu4.11","2.4.7-1ubuntu4.13","2.4.7-1ubuntu4.15"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.18-2ubuntu3.3"}]}],"versions":["2.4.12-2ubuntu2","2.4.17-1ubuntu1","2.4.17-2ubuntu1","2.4.17-3ubuntu1","2.4.18-1ubuntu1","2.4.18-2ubuntu1","2.4.18-2ubuntu2","2.4.18-2ubuntu3","2.4.18-2ubuntu3.1","2.4.18-2ubuntu3.2"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.7-1ubuntu4.16"}]}],"versions":["2.4.6-2ubuntu2","2.4.6-2ubuntu3","2.4.6-2ubuntu4","2.4.7-1ubuntu1","2.4.7-1ubuntu2","2.4.7-1ubuntu3","2.4.7-1ubuntu4","2.4.7-1ubuntu4.1","2.4.7-1ubuntu4.4","2.4.7-1ubuntu4.5","2.4.7-1ubuntu4.6","2.4.7-1ubuntu4.7","2.4.7-1ubuntu4.8","2.4.7-1ubuntu4.9","2.4.7-1ubuntu4.10","2.4.7-1ubuntu4.11","2.4.7-1ubuntu4.13","2.4.7-1ubuntu4.15"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.18-2ubuntu3.3"}]}],"versions":["2.4.12-2ubuntu2","2.4.17-1ubuntu1","2.4.17-2ubuntu1","2.4.17-3ubuntu1","2.4.18-1ubuntu1","2.4.18-2ubuntu1","2.4.18-2ubuntu2","2.4.18-2ubuntu3","2.4.18-2ubuntu3.1","2.4.18-2ubuntu3.2"],"bundled":4}],"products":[{"vendor":"apache","product":"http_server"},{"vendor":"apache software foundation","product":"apache http server"}],"references":[{"url":"https://support.apple.com/HT208221","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"https://access.redhat.com/errata/RHSA-2017:2479","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2017:2483","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20180601-0002/","tags":["x_refsource_CONFIRM","x_transferred","advisory"]},{"url":"https://lists.apache.org/thread.html/84bf7fcc5cad35d355f11839cbdd13cbc5ffc1d34675090bff0f96ae%40%3Cdev.httpd.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://www.nomachine.com/SU08O00185","tags":["x_refsource_CONFIRM","x_transferred","Mitigation","Third Party Advisory","advisory"]},{"url":"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbux03908en_us","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"https://access.redhat.com/errata/RHSA-2017:3475","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2017:3195","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","tags":["x_refsource_CONFIRM","x_transferred","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2017:3476","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2017:3477","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"http://www.debian.org/security/2017/dsa-3896","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2017:3194","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2017:3193","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"http://www.securitytracker.com/id/1038711","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"https://github.com/gottburgm/Exploits/tree/master/CVE-2017-3169","tags":["x_refsource_MISC","x_transferred","web"]},{"url":"http://www.securityfocus.com/bid/99134","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"https://security.gentoo.org/glsa/201710-32","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2017:2478","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://www.tenable.com/security/tns-2019-09","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/r04e89e873d54116a0635ef2f7061c15acc5ed27ef7500997beb65d6f%40%3Ccvs.httpd.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/rfcf929bd33a6833e3f0c35eebdad70d5060665f9c4e17ea467c66770%40%3Ccvs.httpd.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/r6521a7f62276340eabdb3339b2aa9a38c5f59d978497a1f794af53be%40%3Ccvs.httpd.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/rcc44594d4d6579b90deccd4536b5d31f099ef563df39b094be286b9e%40%3Ccvs.httpd.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/rad01d817195e6cc871cb1d73b207ca326379a20a6e7f30febaf56d24%40%3Ccvs.httpd.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/rd336919f655b7ff309385e34a143e41c503e133da80414485b3abcc9%40%3Ccvs.httpd.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/r476d175be0aaf4a17680ef98c5153b4d336eaef76fb2224cc94c463a%40%3Ccvs.httpd.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-3169","tags":["advisory"]},{"url":"https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba@%3Ccvs.httpd.apache.org%3E"},{"url":"https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830@%3Ccvs.httpd.apache.org%3E"},{"url":"https://lists.apache.org/thread.html/84bf7fcc5cad35d355f11839cbdd13cbc5ffc1d34675090bff0f96ae@%3Cdev.httpd.apache.org%3E","tags":["report"]},{"url":"https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f@%3Ccvs.httpd.apache.org%3E"},{"url":"https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53@%3Ccvs.httpd.apache.org%3E"},{"url":"https://lists.apache.org/thread.html/r04e89e873d54116a0635ef2f7061c15acc5ed27ef7500997beb65d6f@%3Ccvs.httpd.apache.org%3E"},{"url":"https://lists.apache.org/thread.html/r476d175be0aaf4a17680ef98c5153b4d336eaef76fb2224cc94c463a@%3Ccvs.httpd.apache.org%3E"},{"url":"https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7@%3Ccvs.httpd.apache.org%3E"},{"url":"https://lists.apache.org/thread.html/r6521a7f62276340eabdb3339b2aa9a38c5f59d978497a1f794af53be@%3Ccvs.httpd.apache.org%3E"},{"url":"https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f@%3Ccvs.httpd.apache.org%3E"},{"url":"https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b@%3Ccvs.httpd.apache.org%3E"},{"url":"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920@%3Ccvs.httpd.apache.org%3E"},{"url":"https://lists.apache.org/thread.html/rad01d817195e6cc871cb1d73b207ca326379a20a6e7f30febaf56d24@%3Ccvs.httpd.apache.org%3E"},{"url":"https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a@%3Ccvs.httpd.apache.org%3E"},{"url":"https://lists.apache.org/thread.html/rcc44594d4d6579b90deccd4536b5d31f099ef563df39b094be286b9e@%3Ccvs.httpd.apache.org%3E"},{"url":"https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f@%3Ccvs.httpd.apache.org%3E"},{"url":"https://lists.apache.org/thread.html/rd336919f655b7ff309385e34a143e41c503e133da80414485b3abcc9@%3Ccvs.httpd.apache.org%3E"},{"url":"https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064@%3Ccvs.httpd.apache.org%3E"},{"url":"https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234@%3Ccvs.httpd.apache.org%3E"},{"url":"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9@%3Ccvs.httpd.apache.org%3E"},{"url":"https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b@%3Ccvs.httpd.apache.org%3E"},{"url":"https://lists.apache.org/thread.html/rfcf929bd33a6833e3f0c35eebdad70d5060665f9c4e17ea467c66770@%3Ccvs.httpd.apache.org%3E"},{"url":"https://security.netapp.com/advisory/ntap-20180601-0002"},{"url":"https://github.com/advisories/GHSA-p3gj-wq33-qg67"},{"url":"https://security.alpinelinux.org/vuln/CVE-2017-3169","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2017-3169","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2017-3169","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2018-0007.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=20002","tags":["report"]},{"url":"https://www.debian.org/security/2017/dsa-3896","tags":["web"]},{"url":"https://www.debian.org/security/2017/dsa-3913","tags":["web"]},{"url":"https://usn.ubuntu.com/usn/usn-3425-1/","tags":["web"]},{"url":"https://httpd.apache.org/security/vulnerabilities_24.html","tags":["web","article"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1463194","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1463197","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1463207","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1470748","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_2478.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-3167","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-3167","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-3167","tags":["advisory"]},{"url":"https://httpd.apache.org/security/vulnerabilities_22.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-3169","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-3169","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-7679","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-7679","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-7679","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-9788","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-9788","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-9788","tags":["advisory"]},{"url":"https://httpd.apache.org/security/vulnerabilities_22.html#2.2.34","tags":["article"]},{"url":"https://httpd.apache.org/security/vulnerabilities_24.html#2.4.27","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1463205","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_2479.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-7668","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-7668","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-7668","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1463199","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_2483.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-7659","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-7659","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-7659","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1490344","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_3193.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-9798","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-9798","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-9798","tags":["advisory"]},{"url":"https://blog.fuzzing-project.org/60-Optionsbleed-HTTP-OPTIONS-method-can-leak-Apaches-server-memory.html","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_3194.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_3195.json","tags":["advisory"]},{"url":"https://access.redhat.com/documentation/en/red-hat-jboss-core-services/","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1506523","tags":["report"]},{"url":"https://issues.redhat.com/browse/JBCS-402","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_3476.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-12613","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-12613","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-12613","tags":["advisory"]},{"url":"http://www.apache.org/dist/apr/Announcement1.x.html","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBCS-403","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_3477.json","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2017/suse-su-20171714-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1035829","tags":["report"]},{"url":"https://bugzilla.suse.com/1041830","tags":["report"]},{"url":"https://bugzilla.suse.com/1045060","tags":["report"]},{"url":"https://bugzilla.suse.com/1045062","tags":["report"]},{"url":"https://bugzilla.suse.com/1045065","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3167","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3169","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7679","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2017/suse-su-20172449-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1043484","tags":["report"]},{"url":"https://bugzilla.suse.com/1043607","tags":["report"]},{"url":"https://bugzilla.suse.com/1048576","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2017-9788","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2017/suse-su-20172756-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1058058","tags":["report"]},{"url":"https://bugzilla.suse.com/980663","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2017-9798","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2017/suse-su-20172907-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1045061","tags":["report"]},{"url":"https://bugzilla.suse.com/1052830","tags":["report"]},{"url":"https://bugzilla.suse.com/1064561","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2009-2699","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-0425","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-0021","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0118","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7668","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2017-3169","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-3340-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-3373-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2017-3167","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-7668","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-7679","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2017-3169","description":"In Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, mod_ssl may dereference a NULL pointer when third-party modules call ap_hook_process_connection() during an HTTP request to an HTTPS port.","status":"published","published":"2017-06-20T01:00:00Z","modified":"2024-08-05T14:16:28.22Z","cwes":["CWE-476"],"updated_at":"2026-11-02T14:33:16.232024Z"}],"euvd":[{"id":"EUVD-2017-12295","description":"In Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, mod_ssl may dereference a NULL pointer when third-party modules call ap_hook_process_connection() during an HTTP request to an HTTPS port.","status":"published","published":"2017-06-20T01:00:00Z","modified":"2024-08-05T14:16:28Z","updated_at":"2026-11-03T02:39:19.04602Z"}],"ghsa":[{"id":"GHSA-p3gj-wq33-qg67","title":"In Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, mod_ssl may dereference a NULL...","description":"In Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, mod_ssl may dereference a NULL pointer when third-party modules call ap_hook_process_connection() during an HTTP request to an HTTPS port.","status":"published","published":"2022-05-13T01:09:43Z","modified":"2025-04-20T03:40:27Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-476"],"updated_at":"2026-11-02T15:01:48.455381Z"}],"nvd":[{"id":"CVE-2017-3169","description":"In Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, mod_ssl may dereference a NULL pointer when third-party modules call ap_hook_process_connection() during an HTTP request to an HTTPS port.","status":"published","published":"2017-06-20T01:29:00.36Z","modified":"2026-06-17T01:17:40.047Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"cwes":["CWE-476"],"updated_at":"2026-11-02T14:03:50.782497Z"}],"osv":[{"id":"ALPINE-CVE-2017-3169","description":"In Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, mod_ssl may dereference a NULL pointer when third-party modules call ap_hook_process_connection() during an HTTP request to an HTTPS port.","status":"published","published":"2017-06-20T01:29:00.36Z","modified":"2026-06-15T18:18:06.778779151Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:27:46.716249Z"},{"id":"BELL-CVE-2017-3169","title":"CVE-2017-3169 does not affect BellSoft software","status":"withdrawn","published":"2023-08-31T12:13:43.856552Z","modified":"2026-01-26T09:49:51.119283Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:28:14.137943Z"},{"id":"CVE-2017-3169","description":"In Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, mod_ssl may dereference a NULL pointer when third-party modules call ap_hook_process_connection() during an HTTP request to an HTTPS port.","status":"published","published":"2017-06-20T01:29:00.36Z","modified":"2026-10-24T10:30:15.946025513Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:44:05.486486Z"},{"id":"DEBIAN-CVE-2017-3169","description":"In Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, mod_ssl may dereference a NULL pointer when third-party modules call ap_hook_process_connection() during an HTTP request to an HTTPS port.","status":"published","published":"2017-06-20T01:29:00.36Z","modified":"2026-09-01T20:03:47.915398739Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:45:29.100767Z"},{"id":"RHSA-2017:2478","title":"Red Hat Security Advisory: httpd security update","status":"published","published":"2024-09-13T16:49:12Z","modified":"2026-09-21T10:01:44Z","cvss":[{"version":"3.0","score":7.4,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:04.262457Z"},{"id":"RHSA-2017:2479","title":"Red Hat Security Advisory: httpd security update","status":"published","published":"2024-09-13T16:49:00Z","modified":"2026-09-21T10:01:44Z","cvss":[{"version":"3.0","score":7.4,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:04.262457Z"},{"id":"RHSA-2017:2483","title":"Red Hat Security Advisory: httpd24-httpd security update","status":"published","published":"2024-09-13T16:49:06Z","modified":"2026-09-21T10:01:45Z","cvss":[{"version":"3.0","score":7.4,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:04.262457Z"},{"id":"RHSA-2017:3193","title":"Red Hat Security Advisory: httpd security update","status":"published","published":"2024-09-13T16:49:25Z","modified":"2026-09-21T10:01:49Z","cvss":[{"version":"3.0","score":7.4,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:04.822845Z"},{"id":"RHSA-2017:3194","title":"Red Hat Security Advisory: httpd security update","status":"published","published":"2024-09-13T16:49:31Z","modified":"2026-09-21T10:01:49Z","cvss":[{"version":"3.0","score":7.4,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:04.822845Z"},{"id":"RHSA-2017:3195","title":"Red Hat Security Advisory: httpd security update","status":"published","published":"2024-09-13T16:49:37Z","modified":"2026-09-21T10:01:50Z","cvss":[{"version":"3.0","score":7.4,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:04.822845Z"},{"id":"RHSA-2017:3476","title":"Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.23 security update","status":"published","published":"2024-09-16T00:32:59Z","modified":"2026-09-21T10:01:53Z","cvss":[{"version":"3.0","score":7.4,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:04.822845Z"},{"id":"RHSA-2017:3477","title":"Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.23 security update","status":"published","published":"2024-09-16T00:33:04Z","modified":"2026-09-21T10:01:54Z","cvss":[{"version":"3.0","score":7.4,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:04.822845Z"},{"id":"UBUNTU-CVE-2017-3169","description":"In Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, mod_ssl may dereference a NULL pointer when third-party modules call ap_hook_process_connection() during an HTTP request to an HTTPS port.","status":"published","published":"2017-06-19T00:00:00Z","modified":"2026-04-22T11:23:26.191156Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:54:14.977781Z"},{"id":"DLA-1009-1","title":"apache2 - security update","status":"published","published":"2017-07-02T00:00:00Z","modified":"2026-03-09T01:01:18.695894Z","updated_at":"2026-11-02T15:46:08.746073Z"},{"id":"DSA-3896-1","title":"apache2 - security update","status":"published","published":"2017-06-22T00:00:00Z","modified":"2026-03-09T01:21:58.530719Z","updated_at":"2026-11-02T15:46:16.523846Z"},{"id":"MGASA-2018-0007","title":"Updated apache packages fix security vulnerability","description":"mod_sessioncrypto was encrypting its data/cookie using the configured ciphers\nwith possibly either CBC or ECB modes of operation (AES256-CBC by default),\nhence no selectable or builtin authenticated encryption. This made it\nvulnerable to padding oracle attacks, particularly with CBC (CVE-2016-0736).\n\nMalicious input to mod_auth_digest will cause the server to crash, and each\ninstance continues to crash even for subsequently valid requests\n(CVE-2016-2161).\n\nEmmanuel Dreyfus reported that the use of ap_get_basic_auth_pw() by third-party\nmodules outside of the authentication phase may lead to authentication\nrequirements being bypassed (CVE-2017-3167).\n\nVasileios Panopoulos of AdNovum Informatik AG discovered that mod_ssl may\ndereference a NULL pointer when third-party modules call\nap_hook_process_connection() during an HTTP request to an HTTPS port leading to\na denial of service (CVE-2017-3169).\n\nJavier Jimenez reported that the HTTP strict parsing contains a flaw leading to\na buffer overread in ap_find_token(). A remote attacker can take advantage of\nthis flaw by carefully crafting a sequence of request headers to cause a\nsegmentation fault, or to force ap_find_token() to return an incorrect value\n(CVE-2017-7668).\n\nChenQin and Hanno Boeck reported that mod_mime can read one byte past the end of\na buffer when sending a malicious Content-Type response header (CVE-2017-7679).\n\nRobert Swiecki reported that mod_auth_digest does not properly initialize or\nreset the value placeholder in [Proxy-]Authorization headers of type \"Digest\"\nbetween successive key=value assignments, leading to information disclosure or\ndenial of service (CVE-2017-9788).\n\nHanno Böck discovered that the Apache HTTP Server incorrectly handled Limit\ndirectives in .htaccess files. In certain configurations, a remote attacker\ncould possibly use this issue to read arbitrary server memory, including\nsensitive information. This issue is known as Optionsbleed (CVE-2017-9798).\n","status":"published","published":"2018-01-01T10:38:51Z","modified":"2026-04-16T06:26:01.391943099Z","updated_at":"2026-11-02T15:49:40.442238Z"},{"id":"SUSE-SU-2017:1714-1","title":"Security update for apache2","description":"\nThis update for apache2 provides the following fixes:\n\nSecurity issues fixed:\n\n- CVE-2017-3167: In Apache use of httpd ap_get_basic_auth_pw() outside\n  of the authentication phase could lead to authentication requirements\n  bypass (bsc#1045065)\n- CVE-2017-3169: In mod_ssl may have a dereference NULL pointer issue\n  which could lead to denial of service (bsc#1045062)\n- CVE-2017-7679: In mod_mime can buffer over-read by 1 byte, potentially\n  leading to a crash or information disclosure (bsc#1045060)\n\nNon-Security issues fixed:\n\n- Remove /usr/bin/http2 symlink only during apache2 package uninstall, not upgrade. (bsc#1041830)\n- In gensslcert, use hostname when fqdn is too long. (bsc#1035829)\n\n","status":"published","published":"2017-06-28T19:14:29Z","modified":"2026-02-04T04:16:12.022133Z","updated_at":"2026-11-02T15:53:44.209561Z"},{"id":"SUSE-SU-2017:2449-1","title":"Recommended update for apache2","description":"\nThis update for apache2 provides the following fixes:\n\nSecurity issues fixed:\n\n* CVE-2017-9788: The value placeholder in [Proxy-]Authorization headers of type 'Digest' was not initialized or reset before or between successive key=value assignments by mod_auth_digest. Providing an initial key with no '=' assignment could reflect the stale value of uninitialized pool memory used by the prior request, leading to leakage of potentially confidential information, and a segfault in other cases resulting in denial of service.  (bsc#1048576)\n* CVE-2017-7679: mod_mime could have read one byte past the end of a buffer when sending a malicious Content-Type response header leading to information leak or crash. (bsc#1045060)\n* CVE-2017-3169: mod_ssl may have dereferenced a NULL pointer when third-party modules call ap_hook_process_connection() during an HTTP request to an HTTPS port leading to crash. (bsc#1045062)\n* CVE-2017-3167: Use of the ap_get_basic_auth_pw() by third-party modules outside of the authentication phase may have lead to authentication requirements being bypassed.  (bsc#1045065)\n\nNon-security issues fixed:\n\n- Re-order cipher suites to keep exclusion list at the end. (bsc#1043484, bsc#1043607)\n- Remove /usr/bin/http2 link only during apache2 package uninstall, not upgrade. (bsc#1041830)\n- In gensslcert, use hostname when fqdn is too long. (bsc#1035829)\n","status":"published","published":"2017-09-13T10:33:25Z","modified":"2026-02-04T03:05:17.23657Z","updated_at":"2026-11-02T15:53:44.209561Z"},{"id":"SUSE-SU-2017:2756-1","title":"Security update for apache2","description":"This update for apache2 fixes several issues.\n\nThese security issues were fixed:\n    \n- CVE-2017-9798: Prevent use-after-free use of memory that allowed for an\n  information leak via OPTIONS (bsc#1058058)\n- CVE-2017-9788: Uninitialized memory reflection in mod_auth_digest could have\n  lead to leakage of potentially confidential information, and a segfault in\n  other cases resulting in DoS (bsc#1048576).\n- CVE-2017-7679: mod_mime could have read one byte past the end of a buffer\n  when sending a malicious Content-Type response header (bsc#1045060).\n- CVE-2017-3169: mod_ssl may dereferenced a NULL pointer when third-party\n  modules call ap_hook_process_connection() during an HTTP request to an HTTPS\n  port allowing for DoS (bsc#1045062).\n- CVE-2017-3167: Use of the ap_get_basic_auth_pw() by third-party modules\n  outside of the authentication phase may have lead to authentication\n  requirements being bypassed (bsc#1045065).\n\nThese non-security issues were fixed:\n\n- remove /usr/bin/http2 symlink only during apache2 package \n  uninstall, not upgrade (bsc#1041830)\n- gensslcert: use hostname when fqdn is too long (bsc#1035829)\n- add NotifyAccess=all to service file (bsc#980663)\n","status":"published","published":"2017-10-18T11:46:36Z","modified":"2026-02-04T03:14:03.692398Z","updated_at":"2026-11-02T15:53:44.209561Z"},{"id":"SUSE-SU-2017:2907-1","title":"Security update for apache2","description":"This update for apache2 fixes the following issues:\n\n- Allow disabling SNI on proxy connections using 'SetEnv proxy-disable-sni 1' in the configuration files. (bsc#1052830)\n- Allow ECDH again in mod_ssl, it had been incorrectly disabled with the 2.2.34 update. (bsc#1064561)\n\nFollowing security issue has been fixed:\n\n- CVE-2017-9798: A use-after-free in the OPTIONS command could be used by attackers to disclose memory of the apache server process, when htaccess uses incorrect Limit statement. (bsc#1058058)\n\nAdditionally, references to the following security issues, fixed by the previous version-update of apache2\nto Apache HTTPD 2.2.34 have been added:\n\n- CVE-2017-7668: The HTTP strict parsing introduced a bug in token list parsing, which allowed ap_find_token() to\n  search past the end of its input string. By maliciously crafting a sequence of request headers, an attacker may\n  have be able to cause a segmentation fault, or to force ap_find_token() to return an incorrect value. (bsc#1045061)\n- CVE-2017-3169: mod_ssl may have de-referenced a NULL pointer when third-party modules call \n  ap_hook_process_connection() during an HTTP request to an HTTPS port allowing for DoS. (bsc#1045062)\n- CVE-2017-3167: Use of the ap_get_basic_auth_pw() by third-party modules outside of the authentication phase may have\n  lead to authentication requirements being bypassed. (bsc#1045065)\n- CVE-2017-7679: mod_mime could have read one byte past the end of a buffer when sending a malicious Content-Type\n  response header. (bsc#1045060)\n","status":"published","published":"2017-10-30T14:55:59Z","modified":"2026-02-04T04:33:58.707919Z","updated_at":"2026-11-02T15:53:44.209561Z"},{"id":"USN-3340-1","title":"apache2 vulnerabilities","description":"Emmanuel Dreyfus discovered that third-party modules using the\nap_get_basic_auth_pw() function outside of the authentication phase may\nlead to authentication requirements being bypassed. This update adds a new\nap_get_basic_auth_components() function for use by third-party modules.\n(CVE-2017-3167)\n\nVasileios Panopoulos discovered that the Apache mod_ssl module may crash\nwhen third-party modules call ap_hook_process_connection() during an HTTP\nrequest to an HTTPS port. (CVE-2017-3169)\n\nJavier Jiménez discovered that the Apache HTTP Server incorrectly handled\nparsing certain requests. A remote attacker could possibly use this issue\nto cause the Apache HTTP Server to crash, resulting in a denial of service.\n(CVE-2017-7668)\n\nChenQin and Hanno Böck discovered that the Apache mod_mime module\nincorrectly handled certain Content-Type response headers. A remote\nattacker could possibly use this issue to cause the Apache HTTP Server to\ncrash, resulting in a denial of service. (CVE-2017-7679)\n","status":"published","published":"2017-06-26T17:14:56Z","modified":"2026-04-22T09:36:48.303373Z","updated_at":"2026-11-02T16:58:13.496563Z"}]}}