apache2 vulnerabilities (Alpine)
151 vulnerabilities.
apache2AlpineRequest splitting via HTTP/2 method injection and mod_proxy7.5 Highapache2AlpineNULL pointer dereference on specially crafted HTTP/2 request7.5 Highapache2AlpineUnexpected URL matching with 'MergeSlashes OFF'5.3 Mediumapache2AlpineApache HTTP Server mod_session response handling heap overflow9.8 Criticalapache2Alpinemod_session NULL pointer dereference7.5 Highapache2Alpinemod_auth_digest possible stack overflow by one nul byte7.3 Highapache2Alpinemod_proxy_http NULL pointer dereference7.5 Highapache2AlpineImproper Handling of Insufficient Privileges5.5 Mediumapache2AlpineApache HTTP Server versions 2.4.20 to 2.4.43 When trace/debug was enabled for the HTTP/2 module...7.5 Highapache2AlpineApache HTTP server 2.4.32 to 2.4.44 mod_proxy_uwsgi info disclosure and possible RCE9.8 Criticalapache2AlpineApache HTTP Server versions 2.4.20 to 2.4.43. A specially crafted value for the 'Cache-Digest'...7.5 Highapache2AlpineAn Uncontrolled Resource Consumption vulnerability in Fortinet FortiSwitch below 3.6.11, 6.0.6...7.5 Highapache2AlpineIn Apache HTTP Server 2.4.0 to 2.4.41, redirects configured with mod_rewrite that were intended...6.1 Mediumapache2AlpineIn Apache HTTP Server 2.4.0 to 2.4.41, mod_proxy_ftp may use uninitialized memory when proxying...5.3 Mediumapache2AlpineIn Apache HTTP Server 2.4.32-2.4.39, when mod_remoteip was configured to use a trusted...7.2 Highapache2AlpineHTTP/2 (2.4.20 through 2.4.39) very early pushes, for example configured with "H2PushResource",...7.5 Highapache2AlpineIn Apache HTTP server 2.4.0 to 2.4.39, Redirects configured with mod_rewrite that were intended...6.1 Mediumapache2AlpineIn Apache HTTP Server 2.4.0-2.4.39, a limited cross-site scripting issue was reported affecting...6.1 Mediumapache2AlpineIn Apache HTTP Server 2.4.18-2.4.39, using fuzzed network input, the http/2 session handling...9.1 Criticalapache2AlpineSome HTTP/2 implementations are vulnerable to unconstrained interal data buffering, potentially leading to a denial of service7.5 Highapache2AlpineIn Apache HTTP Server 2.4 releases 2.4.37 and 2.4.38, a bug in mod_ssl when using per-location...7.5 Highapache2AlpineA vulnerability was found in Apache HTTP Server 2.4.34 to 2.4.38. When HTTP/2 was enabled for a...4.2 Mediumapache2AlpineA vulnerability was found in Apache HTTP Server 2.4.0 to 2.4.38. When the path component of a...5.3 Mediumapache2AlpineIn Apache HTTP Server 2.4 release 2.4.38 and prior, a race condition in mod_auth_digest when...7.5 Highapache2AlpineIn Apache HTTP Server 2.4 releases 2.4.17 to 2.4.38, with MPM event, worker or prefork, code...7.8 Highapache2AlpineA vulnerability was found in Apache HTTP Server 2.4.17 to 2.4.38. Using fuzzed network input, the...5.3 Mediumapache2AlpineA bug exists in the way mod_ssl handled client renegotiations. A remote attacker could send a...7.5 Highapache2AlpineIn Apache HTTP server versions 2.4.37 and prior, by sending request bodies in a slow loris way to...5.3 Mediumapache2AlpineIn Apache HTTP Server 2.4 release 2.4.37 and prior, mod_session checks the session expiry time...7.5 Highapache2AlpineIn Apache HTTP Server 2.4.17 to 2.4.34, by sending continuous, large SETTINGS frames a client can...5.9 Mediumapache2Alpinemod_md, DoS via Coredumps on specially crafted requests7.5 Highapache2AlpineDoS for HTTP/2 connections by crafted requests7.5 Highapache2AlpineIn Apache httpd 2.2.0 to 2.4.29, when generating an HTTP Digest authentication challenge, the...9.8 Criticalapache2AlpineA specially crafted HTTP request header could have crashed the Apache HTTP Server prior to...7.5 Highapache2AlpineWhen an HTTP/2 stream was destroyed after being handled, the Apache HTTP Server prior to version...5.9 Mediumapache2AlpineA specially crafted request could have crashed the Apache HTTP Server prior to version 2.4.30,...5.9 Mediumapache2AlpineIn Apache httpd 2.4.0 to 2.4.29, when mod_session is configured to forward its session data to...5.3 Mediumapache2AlpineIn Apache httpd 2.4.0 to 2.4.29, the expression specified in <FilesMatch> could match '$' to a...8.1 Highapache2AlpineIn Apache httpd 2.0.23 to 2.0.65, 2.2.0 to 2.2.34, and 2.4.0 to 2.4.29, mod_authnz_ldap, if...7.5 Highapache2AlpineApache httpd allows remote attackers to read secret data from process memory if the Limit...7.5 Highapache2AlpineA maliciously constructed HTTP/2 request could cause mod_http2 in Apache HTTP Server 2.4.24, 2.4...7.5 Highapache2AlpineWhen under stress, closing many connections, the HTTP/2 handling code in Apache httpd 2.4.26...7.5 Highapache2AlpineIn Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, mod_mime can read one byte past the...9.8 Criticalapache2AlpineThe HTTP strict parsing changes added in Apache httpd 2.2.32 and 2.4.24 introduced a bug in token...7.5 Highapache2AlpineIn Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, mod_ssl may dereference a NULL...9.8 Criticalapache2AlpineIn Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, use of the ap_get_basic_auth_pw() by...9.8 Criticalapache2AlpineThe Apache HTTP Server through 2.4.23 follows RFC 3875 section 4.1.18 and therefore does not...8.1 High