apache2 vulnerabilities (SUSE)
155 vulnerabilities.
apache2SUSEApache HTTP Server: HTTP request splitting with mod_rewrite and mod_proxy9.8 Criticalapache2SUSEApache HTTP Server: mod_proxy prior to 2.4.55 allows a backend to trigger HTTP response splitting5.3 Mediumapache2SUSEApache HTTP Server: mod_proxy_ajp Possible request smuggling9.0 Criticalapache2SUSEApache HTTP Server: mod_dav out of bounds read, or write of zero byte7.5 Highapache2SUSEmod_proxy X-Forwarded-For dropped by hop-by-hop mechanism9.8 Criticalapache2SUSEInformation Disclosure in mod_lua with websockets7.5 Highapache2SUSEmod_sed denial of service7.5 Highapache2SUSEDenial of service in mod_lua r:parsebody7.5 Highapache2SUSERead beyond bounds in ap_strcmp_match()9.1 Criticalapache2SUSEread beyond bounds via ap_rwrite()5.3 Mediumapache2SUSEmod_proxy_ajp: Possible request smuggling7.5 Highapache2SUSEmod_sed: Read/write beyond bounds9.8 Criticalapache2SUSEcore: Possible buffer overflow with very large or unlimited LimitXMLRequestBody9.1 Criticalapache2SUSEHTTP request smuggling vulnerability in Apache HTTP Server 2.4.52 and earlier9.8 Criticalapache2SUSEmod_lua Use of uninitialized value of in r:parsebody7.5 Highapache2SUSEPossible NULL dereference or SSRF in forward proxy configurations in Apache HTTP Server 2.4.51 and earlier8.2 Highapache2SUSEPossible buffer overflow when parsing multipart content in mod_lua of Apache HTTP Server 2.4.51 and earlier9.8 Criticalapache2SUSEmod_proxy SSRF9.0 Criticalapache2SUSEap_escape_quotes buffer overflow9.8 Criticalapache2SUSEmod_proxy_uwsgi out of bound read7.5 Highapache2SUSENULL pointer dereference in httpd core7.5 Highapache2SUSERequest splitting via HTTP/2 method injection and mod_proxy7.5 Highapache2SUSENULL pointer dereference on specially crafted HTTP/2 request7.5 Highapache2SUSEUnexpected URL matching with 'MergeSlashes OFF'5.3 Mediumapache2SUSEApache HTTP Server mod_session response handling heap overflow9.8 Criticalapache2SUSEmod_session NULL pointer dereference7.5 Highapache2SUSEmod_auth_digest possible stack overflow by one nul byte7.3 Highapache2SUSEmod_proxy_http NULL pointer dereference7.5 Highapache2SUSEIP address spoofing when proxying using mod_remoteip and mod_rewrite For configurations using...5.3 Mediumapache2SUSEApache HTTP Server versions 2.4.20 to 2.4.43 When trace/debug was enabled for the HTTP/2 module...7.5 Highapache2SUSEApache HTTP server 2.4.32 to 2.4.44 mod_proxy_uwsgi info disclosure and possible RCE9.8 Criticalapache2SUSEApache HTTP Server versions 2.4.20 to 2.4.43. A specially crafted value for the 'Cache-Digest'...7.5 Highapache2SUSEIn Apache HTTP Server 2.4.0 to 2.4.41, redirects configured with mod_rewrite that were intended...6.1 Mediumapache2SUSEIn Apache HTTP Server 2.4.0 to 2.4.41, mod_proxy_ftp may use uninitialized memory when proxying...5.3 Mediumapache2SUSEImproper Privilege Management in Tomcat9.8 Criticalapache2SUSEIn Apache HTTP Server 2.4.32-2.4.39, when mod_remoteip was configured to use a trusted...7.2 Highapache2SUSEHTTP/2 (2.4.20 through 2.4.39) very early pushes, for example configured with "H2PushResource",...7.5 Highapache2SUSEIn Apache HTTP server 2.4.0 to 2.4.39, Redirects configured with mod_rewrite that were intended...6.1 Mediumapache2SUSEIn Apache HTTP Server 2.4.0-2.4.39, a limited cross-site scripting issue was reported affecting...6.1 Mediumapache2SUSEIn Apache HTTP Server 2.4.18-2.4.39, using fuzzed network input, the http/2 session handling...9.1 Criticalapache2SUSESome HTTP/2 implementations are vulnerable to unconstrained interal data buffering, potentially leading to a denial of service7.5 Highapache2SUSEA vulnerability was found in Apache HTTP Server 2.4.34 to 2.4.38. When HTTP/2 was enabled for a...4.2 Mediumapache2SUSEA vulnerability was found in Apache HTTP Server 2.4.0 to 2.4.38. When the path component of a...5.3 Mediumapache2SUSEIn Apache HTTP Server 2.4 release 2.4.38 and prior, a race condition in mod_auth_digest when...7.5 Highapache2SUSEIn Apache HTTP Server 2.4 releases 2.4.17 to 2.4.38, with MPM event, worker or prefork, code...7.8 Highapache2SUSEA vulnerability was found in Apache HTTP Server 2.4.17 to 2.4.38. Using fuzzed network input, the...5.3 Mediumapache2SUSEIn Apache HTTP server versions 2.4.37 and prior, by sending request bodies in a slow loris way to...5.3 Mediumapache2SUSEIn Apache HTTP Server 2.4 release 2.4.37 and prior, mod_session checks the session expiry time...7.5 Highapache2SUSEIn Apache HTTP Server 2.4.17 to 2.4.34, by sending continuous, large SETTINGS frames a client can...5.9 Mediumapache2SUSEmod_userdir CRLF injection6.1 Medium- Show moreLoading…