httpd vulnerabilities (TuxCare)
94 vulnerabilities.
httpdTuxCareUpdate of httpdNo scorehttpdTuxCareUpdate of httpdNo scorehttpdTuxCareApache HTTP Server: source code disclosure with handlers configured via AddType5.3 MediumhttpdTuxCareApache HTTP Server: source code disclosure with handlers configured via AddType6.2 MediumhttpdTuxCareApache HTTP Server: mod_rewrite proxy handler substitution7.5 HighhttpdTuxCareApache HTTP Server: Crash resulting in Denial of Service in mod_proxy via a malicious request7.5 HighhttpdTuxCareApache HTTP Server may use exploitable/malicious backend application output to run local handlers via internal redirect9.8 CriticalhttpdTuxCareApache HTTP Server weakness in mod_rewrite when first segment of substitution matches filesystem path.9.1 CriticalhttpdTuxCareApache HTTP Server weakness with encoded question marks in backreferences9.8 CriticalhttpdTuxCareApache HTTP Server proxy encoding problem8.1 HighhttpdTuxCareApache HTTP Server: HTTP Response Splitting in multiple modules6.3 MediumhttpdTuxCareApache HTTP Server: HTTP response splitting7.3 HighhttpdTuxCareApache HTTP Server: HTTP/2 DoS by memory exhaustion on endless continuation frames7.5 HighhttpdTuxCareApache HTTP Server: mod_macro buffer over-read7.5 HighhttpdTuxCareApache HTTP Server: mod_proxy_uwsgi HTTP response splitting7.5 HighhttpdTuxCareApache HTTP Server: HTTP request splitting with mod_rewrite and mod_proxy9.8 CriticalhttpdTuxCareApache HTTP Server: mod_proxy prior to 2.4.55 allows a backend to trigger HTTP response splitting5.3 MediumhttpdTuxCareApache HTTP Server: mod_proxy_ajp Possible request smuggling9.0 CriticalhttpdTuxCareApache HTTP Server: mod_dav out of bounds read, or write of zero byte7.5 HighhttpdTuxCaremod_proxy X-Forwarded-For dropped by hop-by-hop mechanism9.8 CriticalhttpdTuxCareInformation Disclosure in mod_lua with websockets7.5 HighhttpdTuxCaremod_sed denial of service7.5 HighhttpdTuxCareDenial of service in mod_lua r:parsebody7.5 HighhttpdTuxCareRead beyond bounds in ap_strcmp_match()9.1 CriticalhttpdTuxCareread beyond bounds via ap_rwrite()5.3 MediumhttpdTuxCaremod_proxy_ajp: Possible request smuggling7.5 HighhttpdTuxCaremod_sed: Read/write beyond bounds9.8 CriticalhttpdTuxCarecore: Possible buffer overflow with very large or unlimited LimitXMLRequestBody9.1 CriticalhttpdTuxCareHTTP request smuggling vulnerability in Apache HTTP Server 2.4.52 and earlier9.8 CriticalhttpdTuxCaremod_lua Use of uninitialized value of in r:parsebody7.5 HighhttpdTuxCarePossible NULL dereference or SSRF in forward proxy configurations in Apache HTTP Server 2.4.51 and earlier8.2 HighhttpdTuxCarePossible buffer overflow when parsing multipart content in mod_lua of Apache HTTP Server 2.4.51 and earlier9.8 CriticalhttpdTuxCaremod_proxy SSRF9.0 CriticalhttpdTuxCareap_escape_quotes buffer overflow9.8 CriticalhttpdTuxCaremod_proxy_uwsgi out of bound read7.5 HighhttpdTuxCareNULL pointer dereference in httpd core7.5 HighhttpdTuxCareRequest splitting via HTTP/2 method injection and mod_proxy7.5 HighhttpdTuxCareUnexpected URL matching with 'MergeSlashes OFF'5.3 MediumhttpdTuxCaremod_session NULL pointer dereference7.5 HighhttpdTuxCaremod_auth_digest possible stack overflow by one nul byte7.3 HighhttpdTuxCareIn Apache HTTP Server 2.4.0-2.4.39, a limited cross-site scripting issue was reported affecting...6.1 MediumhttpdTuxCareIn Apache httpd 2.4.0 to 2.4.29, the expression specified in <FilesMatch> could match '$' to a...8.1 HighhttpdTuxCareIn Apache httpd 2.0.23 to 2.0.65, 2.2.0 to 2.2.34, and 2.4.0 to 2.4.29, mod_authnz_ldap, if...7.5 HighhttpdTuxCaremod_lua.c in the mod_lua module in the Apache HTTP Server 2.3.x and 2.4.x through 2.4.10 does not...4.3 Medium