apache2 vulnerabilities (SUSE)
155 vulnerabilities.
apache2SUSEmod_md, DoS via Coredumps on specially crafted requests7.5 Highapache2SUSEDoS for HTTP/2 connections by crafted requests7.5 Highapache2SUSEIn Apache httpd 2.2.0 to 2.4.29, when generating an HTTP Digest authentication challenge, the...9.8 Criticalapache2SUSEA specially crafted HTTP request header could have crashed the Apache HTTP Server prior to...7.5 Highapache2SUSEWhen an HTTP/2 stream was destroyed after being handled, the Apache HTTP Server prior to version...5.9 Mediumapache2SUSEA specially crafted request could have crashed the Apache HTTP Server prior to version 2.4.30,...5.9 Mediumapache2SUSEIn Apache httpd 2.4.0 to 2.4.29, when mod_session is configured to forward its session data to...5.3 Mediumapache2SUSEIn Apache httpd 2.4.0 to 2.4.29, the expression specified in <FilesMatch> could match '$' to a...8.1 Highapache2SUSEIn Apache httpd 2.0.23 to 2.0.65, 2.2.0 to 2.2.34, and 2.4.0 to 2.4.29, mod_authnz_ldap, if...7.5 Highapache2SUSEApache httpd allows remote attackers to read secret data from process memory if the Limit...7.5 Highapache2SUSEA maliciously constructed HTTP/2 request could cause mod_http2 in Apache HTTP Server 2.4.24, 2.4...7.5 Highapache2SUSEWhen under stress, closing many connections, the HTTP/2 handling code in Apache httpd 2.4.26...7.5 Highapache2SUSEIn Apache httpd before 2.2.34 and 2.4.x before 2.4.27, the value placeholder in [Proxy-...9.1 Criticalapache2SUSEIn Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, mod_mime can read one byte past the...9.8 Criticalapache2SUSEThe HTTP strict parsing changes added in Apache httpd 2.2.32 and 2.4.24 introduced a bug in token...7.5 Highapache2SUSEIn Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, mod_ssl may dereference a NULL...9.8 Criticalapache2SUSEIn Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, use of the ap_get_basic_auth_pw() by...9.8 Criticalapache2SUSEApache HTTP Server, in all releases prior to 2.2.32 and 2.4.25, was liberal in the whitespace...7.5 Highapache2SUSEIn Apache HTTP Server versions 2.4.0 to 2.4.23, malicious input to mod_auth_digest can cause the...7.5 Highapache2SUSEIn Apache HTTP Server versions 2.4.0 to 2.4.23, mod_session_crypto was encrypting its data/cookie...7.5 Highapache2SUSEThe mod_http2 module in the Apache HTTP Server 2.4.17 through 2.4.23, when the Protocols...7.5 Highapache2SUSEThe Apache HTTP Server through 2.4.23 follows RFC 3875 section 4.1.18 and therefore does not...8.1 Highapache2SUSEThe ap_some_auth_required function in server/request.c in the Apache HTTP Server 2.4.x before 2.4...4.3 Mediumapache2SUSEThe chunked transfer coding implementation in the Apache HTTP Server before 2.4.14 does not...5.0 Mediumapache2SUSEApache Tomcat Connectors (mod_jk) before 1.2.41 ignores JkUnmount rules for subtrees of previous...5.0 Mediumapache2SUSEThe lua_websocket_read function in lua_request.c in the mod_lua module in the Apache HTTP Server...5.0 Mediumapache2SUSEmod_lua.c in the mod_lua module in the Apache HTTP Server 2.3.x and 2.4.x through 2.4.10 does not...4.3 Mediumapache2SUSEThe cache_merge_headers_out function in modules/cache/cache_util.c in the mod_cache module in the...5.0 Mediumapache2SUSEThe deflate_in_filter function in mod_deflate.c in the mod_deflate module in the Apache HTTP...4.3 Mediumapache2SUSEThe mod_headers module in the Apache HTTP Server 2.2.22 allows remote attackers to bypass ...5.0 Mediumapache2SUSEThe TLS protocol 1.2 and earlier, when a DHE_EXPORT ciphersuite is enabled on a server but not on...3.7 Lowapache2SUSEThe log_cookie function in mod_log_config.c in the mod_log_config module in the Apache HTTP...2.6 Lowapache2SUSEmodules/arch/win32/mod_isapi.c in mod_isapi in the Apache HTTP Server 2.0.37 through 2.0.63, 2.2...10.0 Highapache2SUSEThe Solaris pollset feature in the Event Port backend in poll/unix/port.c in the Apache Portable...7.5 High