apache vulnerabilities (Mageia)
151 vulnerabilities.
apacheMageiamod_auth_digest possible stack overflow by one nul byte7.3 HighapacheMageiamod_proxy_http NULL pointer dereference7.5 HighapacheMageiamod_proxy_wstunnel tunneling of non Upgraded connections5.3 MediumapacheMageiaApache HTTP Server versions 2.4.20 to 2.4.43 When trace/debug was enabled for the HTTP/2 module...7.5 HighapacheMageiaApache HTTP server 2.4.32 to 2.4.44 mod_proxy_uwsgi info disclosure and possible RCE9.8 CriticalapacheMageiaApache HTTP Server versions 2.4.20 to 2.4.43. A specially crafted value for the 'Cache-Digest'...7.5 HighapacheMageiaIn Apache HTTP Server 2.4.0 to 2.4.41, redirects configured with mod_rewrite that were intended...6.1 MediumapacheMageiaIn Apache HTTP Server 2.4.0 to 2.4.41, mod_proxy_ftp may use uninitialized memory when proxying...5.3 MediumapacheMageiaIn Apache HTTP Server 2.4.32-2.4.39, when mod_remoteip was configured to use a trusted...7.2 HighapacheMageiaHTTP/2 (2.4.20 through 2.4.39) very early pushes, for example configured with "H2PushResource",...7.5 HighapacheMageiaIn Apache HTTP server 2.4.0 to 2.4.39, Redirects configured with mod_rewrite that were intended...6.1 MediumapacheMageiaIn Apache HTTP Server 2.4.0-2.4.39, a limited cross-site scripting issue was reported affecting...6.1 MediumapacheMageiaIn Apache HTTP Server 2.4.18-2.4.39, using fuzzed network input, the http/2 session handling...9.1 CriticalapacheMageiaSome HTTP/2 implementations are vulnerable to unconstrained interal data buffering, potentially leading to a denial of service7.5 HighapacheMageiaIn Apache HTTP server versions 2.4.37 and prior, by sending request bodies in a slow loris way to...5.3 MediumapacheMageiaIn Apache HTTP Server 2.4 release 2.4.37 and prior, mod_session checks the session expiry time...7.5 HighapacheMageiaIn Apache HTTP Server 2.4.17 to 2.4.34, by sending continuous, large SETTINGS frames a client can...5.9 MediumapacheMageiaDoS for HTTP/2 connections by crafted requests7.5 HighapacheMageiaIn Apache httpd 2.2.0 to 2.4.29, when generating an HTTP Digest authentication challenge, the...9.8 CriticalapacheMageiaA specially crafted HTTP request header could have crashed the Apache HTTP Server prior to...7.5 HighapacheMageiaWhen an HTTP/2 stream was destroyed after being handled, the Apache HTTP Server prior to version...5.9 MediumapacheMageiaA specially crafted request could have crashed the Apache HTTP Server prior to version 2.4.30,...5.9 MediumapacheMageiaIn Apache httpd 2.4.0 to 2.4.29, when mod_session is configured to forward its session data to...5.3 MediumapacheMageiaIn Apache httpd 2.4.0 to 2.4.29, the expression specified in <FilesMatch> could match '$' to a...8.1 HighapacheMageiaIn Apache httpd 2.0.23 to 2.0.65, 2.2.0 to 2.2.34, and 2.4.0 to 2.4.29, mod_authnz_ldap, if...7.5 HighapacheMageiaApache httpd allows remote attackers to read secret data from process memory if the Limit...7.5 HighapacheMageiaWhen under stress, closing many connections, the HTTP/2 handling code in Apache httpd 2.4.26...7.5 HighapacheMageiaIn Apache httpd before 2.2.34 and 2.4.x before 2.4.27, the value placeholder in [Proxy-...9.1 CriticalapacheMageiaIn Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, mod_mime can read one byte past the...9.8 CriticalapacheMageiaThe HTTP strict parsing changes added in Apache httpd 2.2.32 and 2.4.24 introduced a bug in token...7.5 HighapacheMageiaIn Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, mod_ssl may dereference a NULL...9.8 CriticalapacheMageiaIn Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, use of the ap_get_basic_auth_pw() by...9.8 CriticalapacheMageiaApache HTTP Server, in all releases prior to 2.2.32 and 2.4.25, was liberal in the whitespace...7.5 HighapacheMageiaIn Apache HTTP Server versions 2.4.0 to 2.4.23, malicious input to mod_auth_digest can cause the...7.5 HighapacheMageiaIn Apache HTTP Server versions 2.4.0 to 2.4.23, mod_session_crypto was encrypting its data/cookie...7.5 HighapacheMageiaThe Apache HTTP Server through 2.4.23 follows RFC 3875 section 4.1.18 and therefore does not...8.1 HighapacheMageiaThe ap_some_auth_required function in server/request.c in the Apache HTTP Server 2.4.x before 2.4...4.3 MediumapacheMageiaThe chunked transfer coding implementation in the Apache HTTP Server before 2.4.14 does not...5.0 MediumapacheMageiaThe lua_websocket_read function in lua_request.c in the mod_lua module in the Apache HTTP Server...5.0 MediumapacheMageiamod_lua.c in the mod_lua module in the Apache HTTP Server 2.3.x and 2.4.x through 2.4.10 does not...4.3 MediumapacheMageiaThe cache_merge_headers_out function in modules/cache/cache_util.c in the mod_cache module in the...5.0 MediumapacheMageiaThe DISH Anywhere (aka com.sm.SlingGuide.Dish) application 3.5.10 for Android does not verify X...5.4 MediumapacheMageiaThe mod_cgid module in the Apache HTTP Server before 2.4.10 does not have a timeout mechanism,...5.0 MediumapacheMageiaRace condition in the mod_status module in the Apache HTTP Server before 2.4.10 allows remote...6.8 MediumapacheMageiaThe deflate_in_filter function in mod_deflate.c in the mod_deflate module in the Apache HTTP...4.3 MediumapacheMageiaThe mod_proxy module in the Apache HTTP Server 2.4.x before 2.4.10, when a reverse proxy is...4.3 MediumapacheMageiaThe log_cookie function in mod_log_config.c in the mod_log_config module in the Apache HTTP...5.0 MediumapacheMageiaThe dav_xml_get_cdata function in main/util.c in the mod_dav module in the Apache HTTP Server...5.0 MediumapacheMageiamod_session_dbd.c in the mod_session_dbd module in the Apache HTTP Server before 2.4.5 proceeds...7.5 HighapacheMageiamod_dav.c in the Apache HTTP Server before 2.2.25 does not properly determine whether DAV is...4.3 Medium- Show moreLoading…