httpd vulnerabilities (Azure Linux)
94 vulnerabilities.
httpdAzure LinuxApache HTTP Server: HTTP/2 DoS by Memory Increase7.5 HighhttpdAzure LinuxApache HTTP Server: mod_ssl TLS upgrade attack7.4 HighhttpdAzure LinuxApache HTTP Server: mod_proxy_http2 denial of service7.5 HighhttpdAzure LinuxApache HTTP Server: mod_ssl access control bypass with session resumption9.1 CriticalhttpdAzure LinuxApache HTTP Server: mod_ssl error log variable escaping7.5 HighhttpdAzure LinuxApache HTTP Server: SSRF with mod_headers setting Content-Type header7.5 HighhttpdAzure LinuxApache HTTP Server: HTTP response splitting7.5 HighhttpdAzure LinuxApache HTTP Server: source code disclosure with handlers configured via AddType5.3 MediumhttpdAzure LinuxApache HTTP Server: source code disclosure with handlers configured via AddType6.2 MediumhttpdAzure LinuxApache HTTP Server proxy encoding problem8.1 HighhttpdAzure LinuxApache HTTP Server: DoS by Null pointer in websocket over HTTP/25.4 MediumhttpdAzure LinuxApache HTTP Server: HTTP Response Splitting in multiple modules6.3 MediumhttpdAzure LinuxApache HTTP Server: HTTP response splitting7.3 HighhttpdAzure LinuxApache HTTP Server: HTTP/2 DoS by memory exhaustion on endless continuation frames7.5 HighhttpdAzure LinuxApache HTTP Server: DoS in HTTP/2 with initial windows size 07.5 HighhttpdAzure LinuxApache HTTP Server: HTTP/2 stream memory not reclaimed right away on RST5.9 MediumhttpdAzure LinuxEclipse Jetty XmlParser allows arbitrary DOCTYPE declarations7.5 HighhttpdAzure LinuxApache HTTP Server: mod_proxy_uwsgi HTTP response splitting7.5 HighhttpdAzure LinuxApache HTTP Server: HTTP request splitting with mod_rewrite and mod_proxy9.8 CriticalhttpdAzure LinuxApache HTTP Server: mod_proxy prior to 2.4.55 allows a backend to trigger HTTP response splitting5.3 MediumhttpdAzure LinuxApache HTTP Server: mod_proxy_ajp Possible request smuggling9.0 CriticalhttpdAzure Linuxmod_sed: Read/write beyond bounds9.8 CriticalhttpdAzure Linuxcore: Possible buffer overflow with very large or unlimited LimitXMLRequestBody9.1 CriticalhttpdAzure LinuxHTTP request smuggling vulnerability in Apache HTTP Server 2.4.52 and earlier9.8 CriticalhttpdAzure Linuxmod_lua Use of uninitialized value of in r:parsebody7.5 HighhttpdAzure LinuxPossible NULL dereference or SSRF in forward proxy configurations in Apache HTTP Server 2.4.51 and earlier8.2 HighhttpdAzure LinuxPossible buffer overflow when parsing multipart content in mod_lua of Apache HTTP Server 2.4.51 and earlier9.8 CriticalhttpdAzure Linuxmod_proxy SSRF9.0 CriticalhttpdAzure Linuxap_escape_quotes buffer overflow9.8 CriticalhttpdAzure Linuxmod_proxy_uwsgi out of bound read7.5 HighhttpdAzure LinuxNULL pointer dereference in httpd core7.5 HighhttpdAzure LinuxRequest splitting via HTTP/2 method injection and mod_proxy7.5 HighhttpdAzure LinuxXSS vulnerability when using OIDCPreservePost On in mod_auth_openidc3.1 LowhttpdAzure LinuxHardcoded static IV and AAD with a reused key in AES GCM encryption in mod_auth_openidc5.9 MediumhttpdAzure LinuxOpen Redirect in oidc_validate_redirect_url()4.7 MediumhttpdAzure LinuxFormat string bug in the Redis cache implementation5.3 MediumhttpdAzure LinuxUnexpected URL matching with 'MergeSlashes OFF'5.3 MediumhttpdAzure LinuxApache HTTP Server mod_session response handling heap overflow9.8 CriticalhttpdAzure Linuxmod_session NULL pointer dereference7.5 HighhttpdAzure Linuxmod_auth_digest possible stack overflow by one nul byte7.3 HighhttpdAzure Linuxmod_proxy_http NULL pointer dereference7.5 HighhttpdAzure Linuxmod_proxy_wstunnel tunneling of non Upgraded connections5.3 MediumhttpdAzure LinuxImproper Restriction of Operations within the Bounds of a Memory Buffer in akka-http-core7.5 HighhttpdAzure Linuxenvvars (aka envvars-std) in the Apache HTTP Server before 2.4.2 places a zero-length directory...6.9 Medium