{"id":"CVE-2022-36760","aliases":["ALPINE-CVE-2022-36760","ALSA-2023:0852","ALSA-2023:0970","AZL-13027","BELL-CVE-2022-36760","BIT-apache-2022-36760","CLSA-2023-1675111279","CLSA-2023-1675111450","CLSA-2023-1675111607","CLSA-2023-1675111708","CLSA-2023-1675111939","CLSA-2026-1777033551","CLSA-2026-1778789558","CLSA-2026-1778789568","DEBIAN-CVE-2022-36760","DLA-3351-1","DSA-5376-1","EUVD-2022-39460","GHSA-hwqh-57w6-xm49","MGASA-2023-0032","OESA-2023-1052","RHSA-2023:0852","RHSA-2023:0970","RHSA-2023:4629","RLSA-2023:0852","RLSA-2023:0970","SUSE-SU-2023:0183-1","SUSE-SU-2023:0185-1","SUSE-SU-2023:0294-1","SUSE-SU-2023:0321-1","SUSE-SU-2023:0322-1","SUSE-SU-2026:2686-1","UBUNTU-CVE-2022-36760","USN-5834-1","USN-5839-1","openSUSE-SU-2024:12635-1"],"status":"published","title":"Apache HTTP Server: mod_proxy_ajp Possible request smuggling","description":"Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server allows an attacker to smuggle requests to the AJP server it forwards requests to.  This issue affects Apache HTTP Server Apache HTTP Server 2.4 version 2.4.54 and prior versions.","severity":{"version":"3.1","score":9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.01931,"percentile":0.80147,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-444"],"published":"2023-01-17T19:11:55Z","modified":"2026-11-05T12:15:04Z","fixes":[{"ecosystem":"Alpine:v3.14","package":"apache2","fixed_in":["2.4.55-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"apache2","fixed_in":["2.4.55-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"apache2","fixed_in":["2.4.55-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"apache2","fixed_in":["2.4.55-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"apache2","fixed_in":["2.4.55-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"apache2","fixed_in":["2.4.55-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"apache2","fixed_in":["2.4.55-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"apache2","fixed_in":["2.4.55-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"apache2","fixed_in":["2.4.55-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"apache2","fixed_in":["2.4.55-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"apache2","fixed_in":["2.4.55-r0"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"httpd","fixed_in":["2.4.55-1"],"sources":["osv"]},{"ecosystem":"Bitnami","package":"apache","fixed_in":["2.4.55"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"apache2","fixed_in":["1:2.4.18-2ubuntu3.17+tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"apache2-bin","fixed_in":["1:2.4.18-2ubuntu3.17+tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"apache2-data","fixed_in":["1:2.4.18-2ubuntu3.17+tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"apache2-dev","fixed_in":["1:2.4.18-2ubuntu3.17+tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"apache2-doc","fixed_in":["1:2.4.18-2ubuntu3.17+tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"apache2-suexec-custom","fixed_in":["1:2.4.18-2ubuntu3.17+tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"apache2-suexec-pristine","fixed_in":["1:2.4.18-2ubuntu3.17+tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"apache2-utils","fixed_in":["1:2.4.18-2ubuntu3.17+tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:6","package":"httpd","fixed_in":["2.2.15-72.el6.tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:6","package":"httpd-devel","fixed_in":["2.2.15-72.el6.tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:6","package":"httpd-manual","fixed_in":["2.2.15-72.el6.tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:6","package":"httpd-tools","fixed_in":["2.2.15-72.el6.tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:6","package":"mod_ssl","fixed_in":["1:2.2.15-72.el6.tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"httpd","fixed_in":["2.4.37-39.module_el8.4.0+2096+54659116.1.tuxcare.els10"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"httpd-devel","fixed_in":["2.4.37-39.module_el8.4.0+2096+54659116.1.tuxcare.els10"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"httpd-filesystem","fixed_in":["2.4.37-39.module_el8.4.0+2096+54659116.1.tuxcare.els10"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"httpd-manual","fixed_in":["2.4.37-39.module_el8.4.0+2096+54659116.1.tuxcare.els10"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"httpd-tools","fixed_in":["2.4.37-39.module_el8.4.0+2096+54659116.1.tuxcare.els10"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"mod_ldap","fixed_in":["2.4.37-39.module_el8.4.0+2096+54659116.1.tuxcare.els10"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"mod_proxy_html","fixed_in":["1:2.4.37-39.module_el8.4.0+2096+54659116.1.tuxcare.els10"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"mod_session","fixed_in":["2.4.37-39.module_el8.4.0+2096+54659116.1.tuxcare.els10"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"mod_ssl","fixed_in":["1:2.4.37-39.module_el8.4.0+2096+54659116.1.tuxcare.els10"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"httpd","fixed_in":["2.4.37-43.module_el8.5.0+2097+6f259f31.tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"httpd-devel","fixed_in":["2.4.37-43.module_el8.5.0+2097+6f259f31.tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"httpd-filesystem","fixed_in":["2.4.37-43.module_el8.5.0+2097+6f259f31.tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"httpd-manual","fixed_in":["2.4.37-43.module_el8.5.0+2097+6f259f31.tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"httpd-tools","fixed_in":["2.4.37-43.module_el8.5.0+2097+6f259f31.tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"mod_ldap","fixed_in":["2.4.37-43.module_el8.5.0+2097+6f259f31.tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"mod_proxy_html","fixed_in":["1:2.4.37-43.module_el8.5.0+2097+6f259f31.tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"mod_session","fixed_in":["2.4.37-43.module_el8.5.0+2097+6f259f31.tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"mod_ssl","fixed_in":["1:2.4.37-43.module_el8.5.0+2097+6f259f31.tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:6","package":"httpd","fixed_in":["2.2.15-72.el6.tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:6","package":"httpd-devel","fixed_in":["2.2.15-72.el6.tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:6","package":"httpd-manual","fixed_in":["2.2.15-72.el6.tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:6","package":"httpd-tools","fixed_in":["2.2.15-72.el6.tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:6","package":"mod_ssl","fixed_in":["1:2.2.15-72.el6.tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"httpd","fixed_in":["2.4.6-99.0.5.el7.centos.1.tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"httpd-devel","fixed_in":["2.4.6-99.0.5.el7.centos.1.tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"httpd-manual","fixed_in":["2.4.6-99.0.5.el7.centos.1.tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"httpd-tools","fixed_in":["2.4.6-99.0.5.el7.centos.1.tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"mod_ldap","fixed_in":["2.4.6-99.0.5.el7.centos.1.tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"mod_proxy_html","fixed_in":["1:2.4.6-99.0.5.el7.centos.1.tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"mod_session","fixed_in":["2.4.6-99.0.5.el7.centos.1.tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"mod_ssl","fixed_in":["1:2.4.6-99.0.5.el7.centos.1.tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"httpd","fixed_in":["2.4.6-99.0.5.el7_9.1.tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"httpd-devel","fixed_in":["2.4.6-99.0.5.el7_9.1.tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"httpd-manual","fixed_in":["2.4.6-99.0.5.el7_9.1.tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"httpd-tools","fixed_in":["2.4.6-99.0.5.el7_9.1.tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"mod_ldap","fixed_in":["2.4.6-99.0.5.el7_9.1.tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"mod_proxy_html","fixed_in":["1:2.4.6-99.0.5.el7_9.1.tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"mod_session","fixed_in":["2.4.6-99.0.5.el7_9.1.tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"mod_ssl","fixed_in":["1:2.4.6-99.0.5.el7_9.1.tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"httpd","fixed_in":["2.4.6-99.0.5.el7_9.1.tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"httpd-devel","fixed_in":["2.4.6-99.0.5.el7_9.1.tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"httpd-manual","fixed_in":["2.4.6-99.0.5.el7_9.1.tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"httpd-tools","fixed_in":["2.4.6-99.0.5.el7_9.1.tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"mod_ldap","fixed_in":["2.4.6-99.0.5.el7_9.1.tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"mod_proxy_html","fixed_in":["1:2.4.6-99.0.5.el7_9.1.tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"mod_session","fixed_in":["2.4.6-99.0.5.el7_9.1.tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"mod_ssl","fixed_in":["1:2.4.6-99.0.5.el7_9.1.tuxcare.els9"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"apache2","fixed_in":["2.4.55-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"apache2","fixed_in":["2.4.55-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"apache2","fixed_in":["2.4.55-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"apache2","fixed_in":["2.4.18-2ubuntu3.17+esm8"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"apache2","fixed_in":["2.4.29-1ubuntu4.26"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"apache2","fixed_in":["2.4.41-4ubuntu3.13"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"apache2","fixed_in":["2.4.52-1ubuntu4.3"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.14","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.55-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.55-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.55-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.55-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.55-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.55-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.55-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.55-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.55-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.55-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.55-r0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"httpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.37-51.module_el8.7.0+3405+9516b832.1"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"httpd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.37-51.module_el8.7.0+3405+9516b832.1"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"httpd-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.37-51.module_el8.7.0+3405+9516b832.1"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"httpd-manual","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.37-51.module_el8.7.0+3405+9516b832.1"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"httpd-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.37-51.module_el8.7.0+3405+9516b832.1"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"mod_http2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.7-5.module_el8.6.0+2872+fe0ff7aa"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"mod_http2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.7-5.module_el8.6.0+3031+fb177b09"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"mod_ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.37-51.module_el8.7.0+3405+9516b832.1"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"mod_md","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.0.8-8.module_el8.6.0+2872+fe0ff7aa"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"mod_md","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.0.8-8.module_el8.6.0+3031+fb177b09"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"mod_proxy_html","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.37-51.module_el8.7.0+3405+9516b832.1"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"mod_session","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.37-51.module_el8.7.0+3405+9516b832.1"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"mod_ssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.37-51.module_el8.7.0+3405+9516b832.1"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:9","package":"httpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.53-7.el9_1.1"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:9","package":"httpd-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.53-7.el9_1.1"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:9","package":"httpd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.53-7.el9_1.1"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:9","package":"httpd-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.53-7.el9_1.1"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:9","package":"httpd-manual","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.53-7.el9_1.1"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:9","package":"httpd-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.53-7.el9_1.1"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:9","package":"mod_ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.53-7.el9_1.1"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:9","package":"mod_lua","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.53-7.el9_1.1"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:9","package":"mod_proxy_html","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.53-7.el9_1.1"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:9","package":"mod_session","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.53-7.el9_1.1"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:9","package":"mod_ssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.53-7.el9_1.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Azure Linux:2","package":"httpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.55-1"}]}]},{"source":"osv","ecosystem":"Bitnami","package":"apache","ranges":[{"type":"SEMVER","events":[{"introduced":"2.4.0"},{"fixed":"2.4.55"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.18-2ubuntu3.17+tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"apache2-bin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.18-2ubuntu3.17+tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"apache2-data","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.18-2ubuntu3.17+tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"apache2-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.18-2ubuntu3.17+tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"apache2-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.18-2ubuntu3.17+tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"apache2-suexec-custom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.18-2ubuntu3.17+tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"apache2-suexec-pristine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.18-2ubuntu3.17+tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"apache2-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.18-2ubuntu3.17+tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"httpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.15-72.el6.tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"httpd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.15-72.el6.tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"httpd-manual","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.15-72.el6.tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"httpd-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.15-72.el6.tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"mod_ssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.2.15-72.el6.tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"httpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.37-39.module_el8.4.0+2096+54659116.1.tuxcare.els10"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"httpd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.37-39.module_el8.4.0+2096+54659116.1.tuxcare.els10"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"httpd-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.37-39.module_el8.4.0+2096+54659116.1.tuxcare.els10"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"httpd-manual","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.37-39.module_el8.4.0+2096+54659116.1.tuxcare.els10"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"httpd-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.37-39.module_el8.4.0+2096+54659116.1.tuxcare.els10"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"mod_ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.37-39.module_el8.4.0+2096+54659116.1.tuxcare.els10"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"mod_proxy_html","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.37-39.module_el8.4.0+2096+54659116.1.tuxcare.els10"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"mod_session","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.37-39.module_el8.4.0+2096+54659116.1.tuxcare.els10"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"mod_ssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.37-39.module_el8.4.0+2096+54659116.1.tuxcare.els10"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"httpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.37-43.module_el8.5.0+2097+6f259f31.tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"httpd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.37-43.module_el8.5.0+2097+6f259f31.tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"httpd-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.37-43.module_el8.5.0+2097+6f259f31.tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"httpd-manual","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.37-43.module_el8.5.0+2097+6f259f31.tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"httpd-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.37-43.module_el8.5.0+2097+6f259f31.tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"mod_ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.37-43.module_el8.5.0+2097+6f259f31.tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"mod_proxy_html","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.37-43.module_el8.5.0+2097+6f259f31.tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"mod_session","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.37-43.module_el8.5.0+2097+6f259f31.tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"mod_ssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.37-43.module_el8.5.0+2097+6f259f31.tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"httpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.15-72.el6.tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"httpd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.15-72.el6.tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"httpd-manual","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.15-72.el6.tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"httpd-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.15-72.el6.tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"mod_ssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.2.15-72.el6.tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"httpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.6-99.0.5.el7.centos.1.tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"httpd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.6-99.0.5.el7.centos.1.tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"httpd-manual","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.6-99.0.5.el7.centos.1.tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"httpd-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.6-99.0.5.el7.centos.1.tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"mod_ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.6-99.0.5.el7.centos.1.tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"mod_proxy_html","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.6-99.0.5.el7.centos.1.tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"mod_session","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.6-99.0.5.el7.centos.1.tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"mod_ssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.6-99.0.5.el7.centos.1.tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"httpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.6-99.0.5.el7_9.1.tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"httpd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.6-99.0.5.el7_9.1.tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"httpd-manual","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.6-99.0.5.el7_9.1.tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"httpd-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.6-99.0.5.el7_9.1.tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"mod_ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.6-99.0.5.el7_9.1.tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"mod_proxy_html","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.6-99.0.5.el7_9.1.tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"mod_session","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.6-99.0.5.el7_9.1.tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"mod_ssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.6-99.0.5.el7_9.1.tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"httpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.6-99.0.5.el7_9.1.tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"httpd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.6-99.0.5.el7_9.1.tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"httpd-manual","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.6-99.0.5.el7_9.1.tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"httpd-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.6-99.0.5.el7_9.1.tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"mod_ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.6-99.0.5.el7_9.1.tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"mod_proxy_html","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.6-99.0.5.el7_9.1.tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"mod_session","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.6-99.0.5.el7_9.1.tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"mod_ssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.6-99.0.5.el7_9.1.tuxcare.els9"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.55-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.55-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.55-1"}]}]},{"source":"osv","ecosystem":"Debian:10","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.38-3+deb10u9"}]}],"versions":["2.4.38-3","2.4.38-3+deb10u1","2.4.38-3+deb10u2","2.4.38-3+deb10u3","2.4.38-3+deb10u4","2.4.38-3+deb10u5","2.4.38-3+deb10u6","2.4.38-3+deb10u7","2.4.38-3+deb10u8"],"bundled":6},{"source":"osv","ecosystem":"Debian:11","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.56-1~deb11u1"}]}],"versions":["2.4.48-3.1","2.4.48-3.1+deb11u1","2.4.48-4","2.4.49-1","2.4.49-1~bpo10+1","2.4.49-1~deb11u1","2.4.49-1~deb11u2","2.4.49-1~deb11u3","2.4.49-2","2.4.49-3","2.4.49-4","2.4.50-1","2.4.50-1~deb11u1","2.4.51-1","2.4.51-1~bpo10+1","2.4.51-1~bpo10+2","2.4.51-1~deb11u1","2.4.51-2","2.4.52-1","2.4.52-1~bpo10+1","2.4.52-1~deb11u1","2.4.52-1~deb11u2","2.4.52-2","2.4.52-3","2.4.53-1","2.4.53-1~deb11u1","2.4.53-2","2.4.53-2~bpo10+1","2.4.54-1","2.4.54-1~deb11u1","2.4.54-2","2.4.54-3","2.4.54-4","2.4.54-5","2.4.55-1"],"bundled":5},{"source":"osv","ecosystem":"Mageia:8","package":"apache","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.55-1.mga8"}]}],"bundled":3},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"httpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.43-20.oe1"}]}],"bundled":3},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP3","package":"httpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.43-19.oe1"}]}],"bundled":3},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"httpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.51-13.oe2203sp1"}]}],"bundled":3},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP1","package":"httpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.51-13.oe2203sp1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"httpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.37-51.module+el8.7.0+18026+7b169787.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"httpd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.37-51.module+el8.7.0+18026+7b169787.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"httpd-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.37-51.module+el8.7.0+18026+7b169787.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"httpd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.37-51.module+el8.7.0+18026+7b169787.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"httpd-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.37-51.module+el8.7.0+18026+7b169787.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"httpd-manual","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.37-51.module+el8.7.0+18026+7b169787.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"httpd-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.37-51.module+el8.7.0+18026+7b169787.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"httpd-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.37-51.module+el8.7.0+18026+7b169787.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"mod_http2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.7-5.module+el8.6.0+13996+01710940"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"mod_http2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.7-5.module+el8.6.0+13996+01710940"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"mod_http2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.7-5.module+el8.6.0+13996+01710940"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"mod_ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.37-51.module+el8.7.0+18026+7b169787.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"mod_ldap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.37-51.module+el8.7.0+18026+7b169787.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"mod_md","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.0.8-8.module+el8.3.0+6814+67d1e611"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"mod_md-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.0.8-8.module+el8.3.0+6814+67d1e611"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"mod_md-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.0.8-8.module+el8.3.0+6814+67d1e611"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"mod_proxy_html","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.37-51.module+el8.7.0+18026+7b169787.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"mod_proxy_html-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.37-51.module+el8.7.0+18026+7b169787.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"mod_session","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.37-51.module+el8.7.0+18026+7b169787.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"mod_session-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.37-51.module+el8.7.0+18026+7b169787.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"mod_ssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.37-51.module+el8.7.0+18026+7b169787.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"mod_ssl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.37-51.module+el8.7.0+18026+7b169787.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"httpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.53-7.el9_1.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"httpd-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.53-7.el9_1.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"httpd-core-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.53-7.el9_1.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"httpd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.53-7.el9_1.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"httpd-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.53-7.el9_1.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"httpd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.53-7.el9_1.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"httpd-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.53-7.el9_1.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"httpd-manual","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.53-7.el9_1.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"httpd-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.53-7.el9_1.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"httpd-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.53-7.el9_1.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"mod_ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.53-7.el9_1.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"mod_ldap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.53-7.el9_1.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"mod_lua","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.53-7.el9_1.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"mod_lua-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.53-7.el9_1.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"mod_proxy_html","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.53-7.el9_1.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"mod_proxy_html-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.53-7.el9_1.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"mod_session","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.53-7.el9_1.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"mod_session-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.53-7.el9_1.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"mod_ssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.53-7.el9_1.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"mod_ssl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.53-7.el9_1.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-apr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.0-8.el7jbcs"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-apr-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.0-8.el7jbcs"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-apr-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.0-8.el7jbcs"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-apr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.0-8.el8jbcs"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-apr-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.0-8.el8jbcs"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-apr-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.0-8.el8jbcs"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-httpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.57-5.el7jbcs"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-httpd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.57-5.el7jbcs"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-httpd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.57-5.el7jbcs"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-httpd-manual","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.57-5.el7jbcs"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-httpd-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.57-5.el7jbcs"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-httpd-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.57-5.el7jbcs"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-mod_ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.57-5.el7jbcs"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-mod_proxy_html","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.57-5.el7jbcs"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-mod_session","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.57-5.el7jbcs"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-mod_ssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.57-5.el7jbcs"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-httpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.57-5.el8jbcs"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-httpd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.57-5.el8jbcs"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-httpd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.57-5.el8jbcs"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-httpd-manual","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.57-5.el8jbcs"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-httpd-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.57-5.el8jbcs"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-httpd-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.57-5.el8jbcs"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-httpd-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.57-5.el8jbcs"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-mod_ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.57-5.el8jbcs"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-mod_ldap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.57-5.el8jbcs"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-mod_proxy_html","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.57-5.el8jbcs"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-mod_proxy_html-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.57-5.el8jbcs"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-mod_session","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.57-5.el8jbcs"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-mod_session-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.57-5.el8jbcs"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-mod_ssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.57-5.el8jbcs"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-mod_ssl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.57-5.el8jbcs"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-mod_security","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.3-29.el7jbcs"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-mod_security-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.3-29.el7jbcs"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-mod_security","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.3-29.el8jbcs"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-mod_security-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.3-29.el8jbcs"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.2.1-1.el7jbcs"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-curl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.2.1-1.el7jbcs"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-libcurl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.2.1-1.el7jbcs"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-libcurl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.2.1-1.el7jbcs"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.2.1-1.el8jbcs"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-curl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.2.1-1.el8jbcs"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-libcurl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.2.1-1.el8jbcs"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-libcurl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.2.1-1.el8jbcs"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-libcurl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.2.1-1.el8jbcs"}]}],"bundled":9},{"source":"osv","ecosystem":"Rocky Linux:8","package":"httpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.37-51.module+el8.7.0+1059+126e9251"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"mod_http2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.7-5.module+el8.6.0+823+f143cee1"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"mod_md","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.0.8-8.module+el8.5.0+695+1fa8055e"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:9","package":"httpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.53-7.el9_1.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.23-29.94.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.23-29.94.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.23-29.94.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.23-29.94.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4-LTSS","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.23-29.94.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.51-35.22.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.51-35.22.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.51-35.22.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.33-150000.3.72.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.33-150000.3.72.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.33-150000.3.72.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 6","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.33-150000.3.72.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.51-150200.3.51.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.51-150200.3.51.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.51-150200.3.51.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Real Time 15 SP3","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.51-150200.3.51.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.51-150200.3.51.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.51-150200.3.51.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.51-150200.3.51.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.51-150200.3.51.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.2","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.51-150200.3.51.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Retail Branch Server 4.2","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.51-150200.3.51.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Server 4.2","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.51-150200.3.51.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.51-150200.3.51.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.51-150200.3.51.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.51-150400.6.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP4","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.51-150400.6.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP4","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.51-150400.6.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.51-150400.6.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.66-150400.6.57.1"}]}],"bundled":66},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.66-150400.6.57.1"}]}],"bundled":66},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.66-150400.6.57.1"}]}],"bundled":66},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.66-150400.6.57.1"}]}],"bundled":66},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.66-150400.6.57.1"}]}],"bundled":66},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.66-150400.6.57.1"}]}],"bundled":66},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.66-150400.6.57.1"}]}],"bundled":66},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.66-150400.6.57.1"}]}],"bundled":66},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.4.6-2ubuntu2","2.4.6-2ubuntu3","2.4.6-2ubuntu4","2.4.7-1ubuntu1","2.4.7-1ubuntu2","2.4.7-1ubuntu3","2.4.7-1ubuntu4","2.4.7-1ubuntu4.1","2.4.7-1ubuntu4.4","2.4.7-1ubuntu4.5","2.4.7-1ubuntu4.6","2.4.7-1ubuntu4.7","2.4.7-1ubuntu4.8","2.4.7-1ubuntu4.9","2.4.7-1ubuntu4.10","2.4.7-1ubuntu4.11","2.4.7-1ubuntu4.13","2.4.7-1ubuntu4.15","2.4.7-1ubuntu4.16","2.4.7-1ubuntu4.17","2.4.7-1ubuntu4.18","2.4.7-1ubuntu4.19","2.4.7-1ubuntu4.20","2.4.7-1ubuntu4.21","2.4.7-1ubuntu4.22","2.4.7-1ubuntu4.22+esm1","2.4.7-1ubuntu4.22+esm2","2.4.7-1ubuntu4.22+esm3","2.4.7-1ubuntu4.22+esm4","2.4.7-1ubuntu4.22+esm5","2.4.7-1ubuntu4.22+esm6","2.4.7-1ubuntu4.22+esm8","2.4.7-1ubuntu4.22+esm9","2.4.7-1ubuntu4.22+esm10","2.4.7-1ubuntu4.22+esm12","2.4.7-1ubuntu4.22+esm13","2.4.7-1ubuntu4.22+esm14","2.4.7-1ubuntu4.22+esm15","2.4.7-1ubuntu4.22+esm16","2.4.7-1ubuntu4.22+esm17"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.18-2ubuntu3.17+esm8"}]}],"versions":["2.4.12-2ubuntu2","2.4.17-1ubuntu1","2.4.17-2ubuntu1","2.4.17-3ubuntu1","2.4.18-1ubuntu1","2.4.18-2ubuntu1","2.4.18-2ubuntu2","2.4.18-2ubuntu3","2.4.18-2ubuntu3.1","2.4.18-2ubuntu3.2","2.4.18-2ubuntu3.3","2.4.18-2ubuntu3.4","2.4.18-2ubuntu3.5","2.4.18-2ubuntu3.7","2.4.18-2ubuntu3.8","2.4.18-2ubuntu3.9","2.4.18-2ubuntu3.10","2.4.18-2ubuntu3.12","2.4.18-2ubuntu3.13","2.4.18-2ubuntu3.14","2.4.18-2ubuntu3.15","2.4.18-2ubuntu3.17","2.4.18-2ubuntu3.17+esm1","2.4.18-2ubuntu3.17+esm2","2.4.18-2ubuntu3.17+esm3","2.4.18-2ubuntu3.17+esm4","2.4.18-2ubuntu3.17+esm5","2.4.18-2ubuntu3.17+esm6","2.4.18-2ubuntu3.17+esm7"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.29-1ubuntu4.26"}]}],"versions":["2.4.27-2ubuntu3","2.4.29-1ubuntu1","2.4.29-1ubuntu2","2.4.29-1ubuntu3","2.4.29-1ubuntu4","2.4.29-1ubuntu4.1","2.4.29-1ubuntu4.2","2.4.29-1ubuntu4.3","2.4.29-1ubuntu4.4","2.4.29-1ubuntu4.5","2.4.29-1ubuntu4.6","2.4.29-1ubuntu4.7","2.4.29-1ubuntu4.8","2.4.29-1ubuntu4.10","2.4.29-1ubuntu4.11","2.4.29-1ubuntu4.12","2.4.29-1ubuntu4.13","2.4.29-1ubuntu4.14","2.4.29-1ubuntu4.16","2.4.29-1ubuntu4.17","2.4.29-1ubuntu4.18","2.4.29-1ubuntu4.19","2.4.29-1ubuntu4.20","2.4.29-1ubuntu4.21","2.4.29-1ubuntu4.22","2.4.29-1ubuntu4.23","2.4.29-1ubuntu4.24","2.4.29-1ubuntu4.25"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.41-4ubuntu3.13"}]}],"versions":["2.4.41-1ubuntu1","2.4.41-4ubuntu1","2.4.41-4ubuntu2","2.4.41-4ubuntu3","2.4.41-4ubuntu3.1","2.4.41-4ubuntu3.3","2.4.41-4ubuntu3.4","2.4.41-4ubuntu3.5","2.4.41-4ubuntu3.6","2.4.41-4ubuntu3.7","2.4.41-4ubuntu3.8","2.4.41-4ubuntu3.9","2.4.41-4ubuntu3.10","2.4.41-4ubuntu3.11","2.4.41-4ubuntu3.12"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.52-1ubuntu4.3"}]}],"versions":["2.4.48-3.1ubuntu3","2.4.48-3.1ubuntu4","2.4.51-2ubuntu1","2.4.52-1ubuntu1","2.4.52-1ubuntu2","2.4.52-1ubuntu4","2.4.52-1ubuntu4.1","2.4.52-1ubuntu4.2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.18-2ubuntu3.17+esm8"}]}],"versions":["2.4.12-2ubuntu2","2.4.17-1ubuntu1","2.4.17-2ubuntu1","2.4.17-3ubuntu1","2.4.18-1ubuntu1","2.4.18-2ubuntu1","2.4.18-2ubuntu2","2.4.18-2ubuntu3","2.4.18-2ubuntu3.1","2.4.18-2ubuntu3.2","2.4.18-2ubuntu3.3","2.4.18-2ubuntu3.4","2.4.18-2ubuntu3.5","2.4.18-2ubuntu3.7","2.4.18-2ubuntu3.8","2.4.18-2ubuntu3.9","2.4.18-2ubuntu3.10","2.4.18-2ubuntu3.12","2.4.18-2ubuntu3.13","2.4.18-2ubuntu3.14","2.4.18-2ubuntu3.15","2.4.18-2ubuntu3.17","2.4.18-2ubuntu3.17+esm1","2.4.18-2ubuntu3.17+esm2","2.4.18-2ubuntu3.17+esm3","2.4.18-2ubuntu3.17+esm4","2.4.18-2ubuntu3.17+esm5","2.4.18-2ubuntu3.17+esm6","2.4.18-2ubuntu3.17+esm7"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.29-1ubuntu4.26"}]}],"versions":["2.4.27-2ubuntu3","2.4.29-1ubuntu1","2.4.29-1ubuntu2","2.4.29-1ubuntu3","2.4.29-1ubuntu4","2.4.29-1ubuntu4.1","2.4.29-1ubuntu4.2","2.4.29-1ubuntu4.3","2.4.29-1ubuntu4.4","2.4.29-1ubuntu4.5","2.4.29-1ubuntu4.6","2.4.29-1ubuntu4.7","2.4.29-1ubuntu4.8","2.4.29-1ubuntu4.10","2.4.29-1ubuntu4.11","2.4.29-1ubuntu4.12","2.4.29-1ubuntu4.13","2.4.29-1ubuntu4.14","2.4.29-1ubuntu4.16","2.4.29-1ubuntu4.17","2.4.29-1ubuntu4.18","2.4.29-1ubuntu4.19","2.4.29-1ubuntu4.20","2.4.29-1ubuntu4.21","2.4.29-1ubuntu4.22","2.4.29-1ubuntu4.23","2.4.29-1ubuntu4.24","2.4.29-1ubuntu4.25"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.41-4ubuntu3.13"}]}],"versions":["2.4.41-1ubuntu1","2.4.41-4ubuntu1","2.4.41-4ubuntu2","2.4.41-4ubuntu3","2.4.41-4ubuntu3.1","2.4.41-4ubuntu3.3","2.4.41-4ubuntu3.4","2.4.41-4ubuntu3.5","2.4.41-4ubuntu3.6","2.4.41-4ubuntu3.7","2.4.41-4ubuntu3.8","2.4.41-4ubuntu3.9","2.4.41-4ubuntu3.10","2.4.41-4ubuntu3.11","2.4.41-4ubuntu3.12"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.52-1ubuntu4.3"}]}],"versions":["2.4.48-3.1ubuntu3","2.4.48-3.1ubuntu4","2.4.51-2ubuntu1","2.4.52-1ubuntu1","2.4.52-1ubuntu2","2.4.52-1ubuntu4","2.4.52-1ubuntu4.1","2.4.52-1ubuntu4.2"],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.55-1.1"}]}],"bundled":3}],"products":[{"vendor":"apache","product":"http_server"},{"vendor":"apache software foundation","product":"apache http server"}],"references":[{"url":"https://httpd.apache.org/security/vulnerabilities_24.html","tags":["vendor-advisory","x_transferred","Mailing List","Vendor Advisory","advisory","article","report"]},{"url":"https://security.gentoo.org/glsa/202309-01","tags":["x_transferred","web","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-36760","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-hwqh-57w6-xm49"},{"url":"https://security.alpinelinux.org/vuln/CVE-2022-36760","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:0852","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2006-20001","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-36760","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-37436","tags":["report"]},{"url":"https://bugzilla.redhat.com/2161773","tags":["report"]},{"url":"https://bugzilla.redhat.com/2161774","tags":["report"]},{"url":"https://bugzilla.redhat.com/2161777","tags":["report"]},{"url":"https://bugzilla.redhat.com/2165967","tags":["report"]},{"url":"https://errata.almalinux.org/8/ALSA-2023-0852.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:0970","tags":["advisory"]},{"url":"https://errata.almalinux.org/9/ALSA-2023-0970.html","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2022-36760","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/ubuntu16-els/CLSA-2023-1675111279","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/ol6/CLSA-2023-1675111450.html","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/centos8.4-els/CLSA-2023-1675111607.html","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/centos8.5-els/CLSA-2023-1675111708.html","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/els6/CLSA-2023-1675111939.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos7els/CLSA-2026-1777033551.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/rhel7els/CLSA-2026-1778789558.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/oraclelinux7els/CLSA-2026-1778789568.html","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/36xxx/CVE-2022-36760.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2022-36760","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2023-0032.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=31427","tags":["report"]},{"url":"https://downloads.apache.org/httpd/CHANGES_2.4.55","tags":["web"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1052","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-37436","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2006-20001","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2161773","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2161774","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2161777","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2165967","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_0852.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2006-20001","tags":["advisory"]},{"url":"https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2006-20001","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-36760","tags":["advisory","report"]},{"url":"https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2022-36760","tags":["article","report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-37436","tags":["advisory"]},{"url":"https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2022-37436","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_0970.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:4629","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2163615","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2163622","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2169465","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2176211","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2196778","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2196786","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2196793","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_4629.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-24963","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-24963","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-24963","tags":["advisory"]},{"url":"https://lists.apache.org/thread/fw9p6sdncwsjkstwc066vz57xqzfksq9","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-48279","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-48279","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-48279","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-24021","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-24021","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-24021","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-27522","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-27522","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-27522","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-28319","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-28319","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-28319","tags":["advisory"]},{"url":"https://curl.se/docs/CVE-2023-28319.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-28321","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-28321","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-28321","tags":["advisory"]},{"url":"https://curl.se/docs/CVE-2023-28321.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-28322","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-28322","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-28322","tags":["advisory"]},{"url":"https://curl.se/docs/CVE-2023-28322.html","tags":["article"]},{"url":"https://errata.rockylinux.org/RLSA-2023:0852","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2023:0970","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20230183-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1207247","tags":["report"]},{"url":"https://bugzilla.suse.com/1207250","tags":["report"]},{"url":"https://bugzilla.suse.com/1207251","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2006-20001","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-36760","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-37436","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20230185-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20230294-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20230321-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20230322-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20262686-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1207327","tags":["report"]},{"url":"https://bugzilla.suse.com/1208708","tags":["report"]},{"url":"https://bugzilla.suse.com/1214357","tags":["report"]},{"url":"https://bugzilla.suse.com/1263935","tags":["report"]},{"url":"https://bugzilla.suse.com/1263950","tags":["report"]},{"url":"https://bugzilla.suse.com/1263951","tags":["report"]},{"url":"https://bugzilla.suse.com/1263952","tags":["report"]},{"url":"https://bugzilla.suse.com/1263953","tags":["report"]},{"url":"https://bugzilla.suse.com/1263954","tags":["report"]},{"url":"https://bugzilla.suse.com/1263955","tags":["report"]},{"url":"https://bugzilla.suse.com/1263956","tags":["report"]},{"url":"https://bugzilla.suse.com/1263957","tags":["report"]},{"url":"https://bugzilla.suse.com/1264150","tags":["report"]},{"url":"https://bugzilla.suse.com/1264163","tags":["report"]},{"url":"https://bugzilla.suse.com/1267503","tags":["report"]},{"url":"https://bugzilla.suse.com/1267955","tags":["report"]},{"url":"https://bugzilla.suse.com/1267956","tags":["report"]},{"url":"https://bugzilla.suse.com/1267962","tags":["report"]},{"url":"https://bugzilla.suse.com/1267963","tags":["report"]},{"url":"https://bugzilla.suse.com/1267965","tags":["report"]},{"url":"https://bugzilla.suse.com/1267969","tags":["report"]},{"url":"https://bugzilla.suse.com/1267970","tags":["report"]},{"url":"https://bugzilla.suse.com/1267971","tags":["report"]},{"url":"https://bugzilla.suse.com/1267972","tags":["report"]},{"url":"https://bugzilla.suse.com/1267976","tags":["report"]},{"url":"https://bugzilla.suse.com/1267977","tags":["report"]},{"url":"https://bugzilla.suse.com/1267978","tags":["report"]},{"url":"https://bugzilla.suse.com/690734","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2021-44224","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-44790","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-22719","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-22720","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-22721","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-23943","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-26377","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-28614","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-28615","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-29404","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-30522","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-30556","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-31813","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-25690","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-27522","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-31122","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-38709","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-45802","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-24795","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-27316","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-38473","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-38474","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-38475","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-38476","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-38477","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-39573","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-39884","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-40725","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-42516","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-43204","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-47252","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-23048","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-49630","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-49812","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-53020","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-55753","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-58098","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-65082","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-66200","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-23918","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-24072","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-28780","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-29167","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-29168","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-29169","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-29170","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33006","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33007","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33523","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33857","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-34032","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-34059","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-34355","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-34356","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42535","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42536","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43951","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44119","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44185","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44186","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44631","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-48913","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-49975","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2022-36760","tags":["report"]},{"url":"https://www.openwall.com/lists/oss-security/2023/01/17/6","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-5834-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-5839-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2006-20001","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-37436","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2022-36760","title":"Apache HTTP Server: mod_proxy_ajp Possible request smuggling","description":"Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server allows an attacker to smuggle requests to the AJP server it forwards requests to.  This issue affects Apache HTTP Server Apache HTTP Server 2.4 version 2.4.54 and prior versions.","status":"published","published":"2023-01-17T19:11:55.106Z","modified":"2025-04-04T18:08:02.696Z","cvss":[{"version":"3.1","score":9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical","assessor":"adp"}],"cwes":["CWE-444","CWE-444"],"updated_at":"2026-11-02T14:34:35.945659Z"}],"euvd":[{"id":"EUVD-2022-39460","description":"Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server allows an attacker to smuggle requests to the AJP server it forwards requests to.  This issue affects Apache HTTP Server Apache HTTP Server 2.4 version 2.4.54 and prior versions.","status":"published","published":"2023-01-17T19:11:55Z","modified":"2025-04-04T18:08:02Z","cvss":[{"version":"3.1","score":9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T20:52:42.420681Z"}],"ghsa":[{"id":"GHSA-hwqh-57w6-xm49","title":"Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') vulnerability in...","description":"Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server allows an attacker to smuggle requests to the AJP server it forwards requests to. This issue affects Apache HTTP Server Apache HTTP Server 2.4 version 2.4.54 and prior versions.","status":"published","published":"2023-01-17T21:30:22Z","modified":"2023-09-17T05:04:24Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-444"],"updated_at":"2026-11-02T14:54:46.481792Z"}],"nvd":[{"id":"CVE-2022-36760","description":"Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server allows an attacker to smuggle requests to the AJP server it forwards requests to.  This issue affects Apache HTTP Server Apache HTTP Server 2.4 version 2.4.54 and prior versions.","status":"published","published":"2023-01-17T20:15:11.58Z","modified":"2026-06-17T04:53:56.18Z","cvss":[{"version":"3.1","score":9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"3.1","score":9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical","assessor":"secondary"}],"cwes":["CWE-444"],"updated_at":"2026-11-02T14:07:35.157734Z"}],"osv":[{"id":"ALPINE-CVE-2022-36760","description":"Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server allows an attacker to smuggle requests to the AJP server it forwards requests to.  This issue affects Apache HTTP Server Apache HTTP Server 2.4 version 2.4.54 and prior versions.","status":"published","published":"2023-01-17T20:15:11.58Z","modified":"2026-11-03T07:18:33.495156636Z","cvss":[{"version":"3.1","score":9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-03T07:51:12.284675Z"},{"id":"AZL-13027","title":"CVE-2022-36760 affecting package httpd for versions less than 2.4.55-1","description":"Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server allows an attacker to smuggle requests to the AJP server it forwards requests to.  This issue affects Apache HTTP Server Apache HTTP Server 2.4 version 2.4.54 and prior versions.","status":"published","published":"2023-01-17T20:15:11Z","modified":"2026-04-21T04:22:33.728394Z","cvss":[{"version":"3.1","score":9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:28:02.666535Z"},{"id":"BELL-CVE-2022-36760","title":"CVE-2022-36760 does not affect BellSoft software","status":"withdrawn","published":"2023-08-31T12:14:51.316169Z","modified":"2026-01-26T09:46:02.175627Z","cvss":[{"version":"3.1","score":9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:28:17.151188Z"},{"id":"CVE-2022-36760","title":"Apache HTTP Server: mod_proxy_ajp Possible request smuggling","description":"Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server allows an attacker to smuggle requests to the AJP server it forwards requests to.  This issue affects Apache HTTP Server Apache HTTP Server 2.4 version 2.4.54 and prior versions.","status":"published","published":"2023-01-17T19:11:55.106Z","modified":"2026-10-28T10:27:22.567393899Z","cvss":[{"version":"3.1","score":9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-444"],"updated_at":"2026-11-02T15:44:26.53798Z"},{"id":"DEBIAN-CVE-2022-36760","description":"Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server allows an attacker to smuggle requests to the AJP server it forwards requests to.  This issue affects Apache HTTP Server Apache HTTP Server 2.4 version 2.4.54 and prior versions.","status":"published","published":"2023-01-17T20:15:11.58Z","modified":"2026-11-03T08:02:22.845360808Z","cvss":[{"version":"3.1","score":9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-03T08:24:50.542442Z"},{"id":"OESA-2023-1052","title":"httpd security update","description":"Apache HTTP Server is a powerful and flexible HTTP/1.1 compliant web server.\r\n\r\n\r\n\r\nSecurity Fix(es):\r\n\r\nInconsistent Interpretation of HTTP Requests (\u0026apos;HTTP Request Smuggling\u0026apos;) vulnerability in mod_proxy_ajp of Apache HTTP Server allows an attacker to smuggle requests to the AJP server it forwards requests to. This issue affects Apache HTTP Server Apache HTTP Server 2.4 version 2.4.54 and prior versions.(CVE-2022-36760)\r\n\r\nPrior to Apache HTTP Server 2.4.55, a malicious backend can cause the response headers to be truncated early, resulting in some headers being incorporated into the response body. If the later headers have any security purpose, they will not be interpreted by the client.(CVE-2022-37436)\r\n\r\nA carefully crafted If: request header can cause a memory read, or write of a single zero byte, in a pool (heap) memory location beyond the header value sent. This could cause the process to crash. This issue affects Apache HTTP Server 2.4.54 and earlier.(CVE-2006-20001)","status":"published","published":"2023-02-03T11:05:32Z","modified":"2026-08-18T01:17:28.453110056Z","cvss":[{"version":"3.1","score":9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:39.934788Z"},{"id":"RHSA-2023:0852","title":"Red Hat Security Advisory: httpd:2.4 security and bug fix update","status":"published","published":"2024-09-13T21:07:04Z","modified":"2026-09-21T10:04:35Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:10.611604Z"},{"id":"RHSA-2023:0970","title":"Red Hat Security Advisory: httpd security and bug fix update","status":"published","published":"2024-09-13T21:07:35Z","modified":"2026-09-21T10:04:37Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:10.611604Z"},{"id":"RHSA-2023:4629","title":"Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.57 security update","status":"published","published":"2024-09-13T23:26:54Z","modified":"2026-09-21T10:05:09Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:11.154197Z"},{"id":"RLSA-2023:0852","title":"Moderate: httpd:2.4 security and bug fix update","description":"The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server.\n\nSecurity Fix(es):\n\n* httpd: mod_dav: out-of-bounds read/write of zero byte (CVE-2006-20001)\n\n* httpd: mod_proxy_ajp: Possible request smuggling (CVE-2022-36760)\n\n* httpd: mod_proxy: HTTP response splitting (CVE-2022-37436)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nBug Fix(es):\n\n* httpd-init fails to create localhost.crt, localhost.key due to \"sscg\" default now creates a /dhparams.pem and is not idempotent if the file /dhparams.pem already exists. (BZ#2165967)","status":"published","published":"2023-02-22T01:08:53.668036Z","modified":"2026-02-05T12:30:09.10199Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:24.322216Z"},{"id":"RLSA-2023:0970","title":"Moderate: httpd security and bug fix update","description":"The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server.\n\nSecurity Fix(es):\n\n* httpd: mod_dav: out-of-bounds read/write of zero byte (CVE-2006-20001)\n\n* httpd: mod_proxy_ajp: Possible request smuggling (CVE-2022-36760)\n\n* httpd: mod_proxy: HTTP response splitting (CVE-2022-37436)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nBug Fix(es):\n\n* httpd-init fails to create localhost.crt, localhost.key due to \"sscg\" default now creates a /dhparams.pem and is not idempotent if the file /dhparams.pem already exists. (BZ#2165975)","status":"published","published":"2023-04-06T15:53:36.002725Z","modified":"2026-02-04T09:15:05.371978Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:24.322216Z"},{"id":"UBUNTU-CVE-2022-36760","description":"Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server allows an attacker to smuggle requests to the AJP server it forwards requests to.  This issue affects Apache HTTP Server Apache HTTP Server 2.4 version 2.4.54 and prior versions.","status":"published","published":"2023-01-17T20:15:00Z","modified":"2026-10-17T12:55:59.185406427Z","cvss":[{"version":"3.1","score":9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical"},{"version":"3.1","score":9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T16:53:54.697021Z"},{"id":"ALSA-2023:0852","title":"Moderate: httpd:2.4 security and bug fix update","description":"The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server.\n\nSecurity Fix(es):\n\n* httpd: mod_dav: out-of-bounds read/write of zero byte (CVE-2006-20001)\n* httpd: mod_proxy_ajp: Possible request smuggling (CVE-2022-36760)\n* httpd: mod_proxy: HTTP response splitting (CVE-2022-37436)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nBug Fix(es):\n\n* httpd-init fails to create localhost.crt, localhost.key due to \"sscg\" default now creates a /dhparams.pem and is not idempotent if the file /dhparams.pem already exists. (BZ#2165967)","status":"published","published":"2023-02-21T00:00:00Z","modified":"2026-11-05T12:15:04.987710799Z","updated_at":"2026-11-05T13:30:00.949926Z"},{"id":"ALSA-2023:0970","title":"Moderate: httpd security and bug fix update","description":"The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server.\n\nSecurity Fix(es):\n\n* httpd: mod_dav: out-of-bounds read/write of zero byte (CVE-2006-20001)\n* httpd: mod_proxy_ajp: Possible request smuggling (CVE-2022-36760)\n* httpd: mod_proxy: HTTP response splitting (CVE-2022-37436)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nBug Fix(es):\n\n* httpd-init fails to create localhost.crt, localhost.key due to \"sscg\" default now creates a /dhparams.pem and is not idempotent if the file /dhparams.pem already exists. (BZ#2165975)","status":"published","published":"2023-02-28T00:00:00Z","modified":"2026-10-29T11:31:23.372292986Z","updated_at":"2026-11-02T15:27:51.655726Z"},{"id":"BIT-apache-2022-36760","title":"Apache HTTP Server: mod_proxy_ajp Possible request smuggling","description":"Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server allows an attacker to smuggle requests to the AJP server it forwards requests to.  This issue affects Apache HTTP Server Apache HTTP Server 2.4 version 2.4.54 and prior versions.","status":"published","published":"2024-03-06T10:51:40.066Z","modified":"2026-09-08T08:45:41.222869702Z","updated_at":"2026-11-02T15:28:28.267217Z"},{"id":"CLSA-2023-1675111279","title":"Fix CVE(s): CVE-2022-36760","description":"\n   * SECURITY UPDATE: possible HTTP request smuggling in the mod_proxy_ajp\n     - debian/patches/CVE-2022-36760.patch: ensure connection closure for an\n       invalid Transfer-Encoding header, to prevent HTTP request smuggling\n       attack with an AJP proxy\n     - CVE-2022-36760","status":"published","published":"2023-01-30T20:41:19Z","modified":"2026-06-04T10:03:39.977351Z","updated_at":"2026-11-02T15:43:40.176048Z"},{"id":"CLSA-2023-1675111450","title":"httpd: Fix of CVE-2022-36760","description":"- CVE-2022-36760: mod_proxy_ajp: fix possible HTTP request smuggling","status":"published","published":"2023-01-30T20:44:10Z","modified":"2026-06-01T00:33:24.656090406Z","updated_at":"2026-11-02T15:43:40.176048Z"},{"id":"CLSA-2023-1675111607","title":"httpd: Fix of CVE-2022-36760","description":"- CVE-2022-36760: mod_proxy_ajp: fix possible HTTP request smuggling","status":"published","published":"2023-01-30T20:46:47Z","modified":"2026-06-01T00:33:20.321529152Z","updated_at":"2026-11-02T15:43:40.176048Z"},{"id":"CLSA-2023-1675111708","title":"httpd: Fix of CVE-2022-36760","description":"- CVE-2022-36760: mod_proxy_ajp: fix possible HTTP request smuggling","status":"published","published":"2023-01-30T20:48:28Z","modified":"2026-06-01T00:33:21.784196895Z","updated_at":"2026-11-02T15:43:40.176048Z"},{"id":"CLSA-2023-1675111939","title":"httpd: Fix of CVE-2022-36760","description":"- CVE-2022-36760: mod_proxy_ajp: fix possible HTTP request smuggling","status":"published","published":"2023-01-30T20:52:19Z","modified":"2026-06-01T00:33:15.784500498Z","updated_at":"2026-11-02T15:43:40.176048Z"},{"id":"CLSA-2026-1777033551","title":"httpd: Fix of CVE-2022-36760","description":"- CVE-2022-36760: mod_proxy_ajp: fix possible request smuggling via invalid\n  Transfer-Encoding","status":"published","published":"2026-04-25T08:40:12Z","modified":"2026-06-01T00:33:18.431066032Z","updated_at":"2026-11-02T15:43:44.384419Z"},{"id":"CLSA-2026-1778789558","title":"httpd: Fix of CVE-2022-36760","description":"- CVE-2022-36760: mod_proxy_ajp: fix possible request smuggling via invalid\n  Transfer-Encoding","status":"published","published":"2026-05-14T20:12:43Z","modified":"2026-06-01T00:33:28.32300483Z","updated_at":"2026-11-02T15:43:44.737408Z"},{"id":"CLSA-2026-1778789568","title":"httpd: Fix of CVE-2022-36760","description":"- CVE-2022-36760: mod_proxy_ajp: fix possible request smuggling via invalid\n  Transfer-Encoding","status":"published","published":"2026-05-14T20:12:55Z","modified":"2026-06-01T00:33:14.27724081Z","updated_at":"2026-11-02T15:43:44.737408Z"},{"id":"DLA-3351-1","title":"apache2 - security update","status":"published","published":"2023-03-03T00:00:00Z","modified":"2026-03-09T01:23:13.027947Z","updated_at":"2026-11-02T15:46:11.734021Z"},{"id":"DSA-5376-1","title":"apache2 - security update","status":"published","published":"2023-03-20T00:00:00Z","modified":"2026-03-09T02:10:27.747457Z","updated_at":"2026-11-02T15:46:17.543497Z"},{"id":"MGASA-2023-0032","title":"Updated apache packages fix security vulnerability","description":"CVE-2022-37436: Apache HTTP Server: mod_proxy prior to 2.4.55 allows a\nbackend to trigger HTTP response splitting. Prior to 2.4.55, a malicious\nbackend can cause the response headers to be truncated early, resulting in\nsome headers being incorporated into the response body. If the later\nheaders have any security purpose, they will not be interpreted by the\nclient. Credits: Dimas Fariski Setyawan Putra (@nyxsorcerer)\n\nCVE-2022-36760: Apache HTTP Server: mod_proxy_ajp Possible request\nsmuggling. Inconsistent Interpretation of HTTP Requests ('HTTP Request\nSmuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server allows an\nattacker to smuggle requests to the AJP server it forwards requests to.\nCredits: ZeddYu_Lu from Qi'anxin Research Institute of Legendsec at\nQi'anxin Group\n\nCVE-2006-20001: mod_dav out of  bounds read, or write of zero byte\nA carefully crafted If: request header can cause a memory read, or write\nof a single zero byte, in a pool (heap) memory location beyond the header\nvalue sent. This could cause the process to crash.\n","status":"published","published":"2023-02-07T00:06:39Z","modified":"2026-04-16T04:44:44.987090309Z","updated_at":"2026-11-02T15:49:42.263076Z"},{"id":"openSUSE-SU-2024:12635-1","title":"apache2-2.4.55-1.1 on GA media","description":"These are all security issues fixed in the apache2-2.4.55-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:41:39.468579Z","updated_at":"2026-11-02T16:58:35.751245Z"},{"id":"SUSE-SU-2023:0183-1","title":"Security update for apache2","description":"This update for apache2 fixes the following issues:\n\n- CVE-2022-37436: Fixed an issue in mod_proxy where a malicious\n  backend could cause the response headers to be truncated early,\n  resulting in some headers being incorporated into the response body\n  (bsc#1207251).\n- CVE-2022-36760: Fixed an issue in mod_proxy_ajp that could allow\n  request smuggling attacks (bsc#1207250).\n- CVE-2006-20001: Fixed an issue in mod_proxy_ajp where a request\n  header could cause memory corruption (bsc#1207247).\n","status":"published","published":"2023-01-27T10:26:01Z","modified":"2026-02-04T04:39:30.506518Z","updated_at":"2026-11-02T15:53:51.853735Z"},{"id":"SUSE-SU-2023:0185-1","title":"Security update for apache2","description":"This update for apache2 fixes the following issues:\n\n- CVE-2022-37436: Fixed an issue in mod_proxy where a malicious\n  backend could cause the response headers to be truncated early,\n  resulting in some headers being incorporated into the response body\n  (bsc#1207251).\n- CVE-2022-36760: Fixed an issue in mod_proxy_ajp that could allow\n  request smuggling attacks (bsc#1207250).\n- CVE-2006-20001: Fixed an issue in mod_proxy_ajp where a request\n  header could cause memory corruption (bsc#1207247).\n","status":"published","published":"2023-01-27T10:26:32Z","modified":"2026-02-04T02:39:52.005198Z","updated_at":"2026-11-02T15:53:51.853735Z"},{"id":"SUSE-SU-2023:0294-1","title":"Security update for apache2","description":"This update for apache2 fixes the following issues:\n\n- CVE-2022-37436: Fixed an issue in mod_proxy where a malicious\n  backend could cause the response headers to be truncated early,\n  resulting in some headers being incorporated into the response body\n  (bsc#1207251).\n- CVE-2022-36760: Fixed an issue in mod_proxy_ajp that could allow\n  request smuggling attacks (bsc#1207250).\n- CVE-2006-20001: Fixed an issue in mod_proxy_ajp where a request\n  header could cause memory corruption (bsc#1207247).\n","status":"published","published":"2023-02-07T09:39:14Z","modified":"2026-02-04T03:25:45.168297Z","updated_at":"2026-11-02T15:53:51.853735Z"},{"id":"SUSE-SU-2023:0321-1","title":"Security update for apache2","description":"This update for apache2 fixes the following issues:\n\n- CVE-2022-37436: Fixed an issue in mod_proxy where a malicious\n  backend could cause the response headers to be truncated early,\n  resulting in some headers being incorporated into the response body\n  (bsc#1207251).\n- CVE-2022-36760: Fixed an issue in mod_proxy_ajp that could allow\n  request smuggling attacks (bsc#1207250).\n- CVE-2006-20001: Fixed an issue in mod_proxy_ajp where a request\n  header could cause memory corruption (bsc#1207247).\n","status":"published","published":"2023-02-08T15:19:06Z","modified":"2025-05-02T04:29:34.254919Z","updated_at":"2026-11-02T15:53:51.853735Z"},{"id":"SUSE-SU-2023:0322-1","title":"Security update for apache2","description":"This update for apache2 fixes the following issues:\n\n- CVE-2022-37436: Fixed an issue in mod_proxy where a malicious\n  backend could cause the response headers to be truncated early,\n  resulting in some headers being incorporated into the response body\n  (bsc#1207251).\n- CVE-2022-36760: Fixed an issue in mod_proxy_ajp that could allow\n  request smuggling attacks (bsc#1207250).\n- CVE-2006-20001: Fixed an issue in mod_proxy_ajp where a request\n  header could cause memory corruption (bsc#1207247).\n","status":"published","published":"2023-02-08T15:19:55Z","modified":"2026-02-04T02:56:19.808915Z","updated_at":"2026-11-02T15:53:51.853735Z"},{"id":"SUSE-SU-2026:2686-1","title":"Security update for apache2","description":"This update for apache2 fixes the following issues\n\n- CVE-2026-23918: http2: double free and possible RCE on early reset (bsc#1263957).\n- CVE-2026-24072: mod_rewrite elevation of privileges via ap_expr (bsc#1263935).\n- CVE-2026-28780: heap buffer overflow in `mod_proxy_ajp` via `ajp_msg_check_header()` (bsc#1264163).\n- CVE-2026-29167: mod_ldap per-dir use-after-free (bsc#1267976).\n- CVE-2026-29168: allocation of resources without limits in `mod_md` via OCSP response (bsc#1264150).\n- CVE-2026-29169: NULL pointer dereference in `mod_dav_lock` allows server crash via malicious requests (bsc#1263956).\n- CVE-2026-29170: mod_proxy_ftp XSS (bsc#1267977).\n- CVE-2026-33006: `mod_auth_digest` timing attack allows bypass of Digest authentication (bsc#1263955).\n- CVE-2026-33007: NULL pointer dereference in `mod_authn_socache` allows unauthenticated remote user to crash a child\n  processes (bsc#1263954).\n- CVE-2026-33523: HTTP response splitting forwarding malicious status line (bsc#1263953).\n- CVE-2026-33857: off-by-one OOB reads in AJP getter functions (bsc#1263952).\n- CVE-2026-34032: heap buffer overread in `mod_proxy_ajp` due to missing null-termination check (bsc#1263951).\n- CVE-2026-34059: heap buffer overread and memory disclosure via `ajp_parse_data()` (bsc#1263950).\n- CVE-2026-34355: mod_proxy_html buffer overflow (bsc#1267978).\n- CVE-2026-34356: malicious backend servers can lead to a heap-based buffer overflow (bsc#1267955).\n- CVE-2026-42535: malicious path manipulation can lead to child process crashes (bsc#1267956).\n- CVE-2026-42536: processing untrusted content can lead to a heap-based buffer overflow (bsc#1267962).\n- CVE-2026-43951: out-of-bound read in `merge_response_headers` can cause crash (bsc#1267963).\n- CVE-2026-44119: improper privilege management can lead to an unauthorized read (bsc#1267965).\n- CVE-2026-44185: Stack Buffer Over-Read in mod_ssl OCSP `send_request` (bsc#1267969).\n- CVE-2026-44186: responses from an attacker-controlled FTP backend can lead to resource exhaustion and a denial of\n  service (bsc#1267970).\n- CVE-2026-44631: crafted regular expression can lead to a buffer underwrite (bsc#1267971).\n- CVE-2026-48913: file handle exhaustion during request processing in mod_http2 can lead to a use-after-free\n  (bsc#1267972).\n- CVE-2026-49975: Fix cookie header accounting against LimitRequestFields (bsc#1267503).\n\nNon security issue:\n\n- Update to 2.4.66 (jsc#PED-16334).\n","status":"published","published":"2026-06-29T22:36:03Z","modified":"2026-07-01T09:45:04.712117752Z","updated_at":"2026-11-02T15:54:04.519245Z"},{"id":"USN-5834-1","title":"apache2 vulnerabilities","description":"It was discovered that the Apache HTTP Server mod_dav module did not\nproperly handle specially crafted request headers. A remote attacker\ncould possibly use this issue to cause the process to crash, leading\nto a denial of service. (CVE-2006-20001)\n\nIt was discovered that the Apache HTTP Server mod_proxy_ajp module did not\nproperly handle certain invalid Transfer-Encoding headers. A remote attacker\ncould possibly use this issue to perform an HTTP Request Smuggling attack.\n(CVE-2022-36760)\n","status":"published","published":"2023-01-31T13:13:51Z","modified":"2026-06-25T13:31:44.120191974Z","updated_at":"2026-11-02T16:58:16.738762Z"},{"id":"USN-5839-1","title":"apache2 vulnerabilities","description":"It was discovered that the Apache HTTP Server mod_dav module incorrectly\nhandled certain If: request headers. A remote attacker could possibly use\nthis issue to cause the server to crash, resulting in a denial of service.\n(CVE-2006-20001)\n\nZeddYu_Lu discovered that the Apache HTTP Server mod_proxy_ajp module\nincorrectly interpreted certain HTTP Requests. A remote attacker could\npossibly use this issue to perform an HTTP Request Smuggling attack.\n(CVE-2022-36760)\n\nDimas Fariski Setyawan Putra discovered that the Apache HTTP Server\nmod_proxy module incorrectly truncated certain response headers. This may\nresult in later headers not being interpreted by the client.\n(CVE-2022-37436)\n","status":"published","published":"2023-02-01T13:09:22Z","modified":"2026-04-27T16:31:23.056384Z","updated_at":"2026-11-02T16:58:16.738762Z"}]}}