apache2 vulnerabilities (openSUSE)
199 vulnerabilities.
apache2openSUSEApache HTTP Server: HTTP response splitting7.3 Highapache2openSUSEApache HTTP Server: HTTP/2 DoS by memory exhaustion on endless continuation frames7.5 Highapache2openSUSEApache HTTP Server: DoS in HTTP/2 with initial windows size 07.5 Highapache2openSUSEApache HTTP Server: mod_macro buffer over-read7.5 Highapache2openSUSEApache HTTP Server: HTTP/2 stream memory not reclaimed right away on RST5.9 Mediumapache2openSUSEEclipse Jetty XmlParser allows arbitrary DOCTYPE declarations7.5 Highapache2openSUSEApache HTTP Server: mod_proxy_uwsgi HTTP response splitting7.5 Highapache2openSUSEApache HTTP Server: HTTP request splitting with mod_rewrite and mod_proxy9.8 Criticalapache2openSUSEApache HTTP Server: mod_proxy prior to 2.4.55 allows a backend to trigger HTTP response splitting5.3 Mediumapache2openSUSEApache HTTP Server: mod_proxy_ajp Possible request smuggling9.0 Criticalapache2openSUSEApache HTTP Server: mod_dav out of bounds read, or write of zero byte7.5 Highapache2openSUSEmod_proxy X-Forwarded-For dropped by hop-by-hop mechanism9.8 Criticalapache2openSUSEInformation Disclosure in mod_lua with websockets7.5 Highapache2openSUSEmod_sed denial of service7.5 Highapache2openSUSEDenial of service in mod_lua r:parsebody7.5 Highapache2openSUSERead beyond bounds in ap_strcmp_match()9.1 Criticalapache2openSUSEread beyond bounds via ap_rwrite()5.3 Mediumapache2openSUSEread beyond bounds in mod_isapi5.3 Mediumapache2openSUSEmod_proxy_ajp: Possible request smuggling7.5 Highapache2openSUSEmod_sed: Read/write beyond bounds9.8 Criticalapache2openSUSEcore: Possible buffer overflow with very large or unlimited LimitXMLRequestBody9.1 Criticalapache2openSUSEHTTP request smuggling vulnerability in Apache HTTP Server 2.4.52 and earlier9.8 Criticalapache2openSUSEmod_lua Use of uninitialized value of in r:parsebody7.5 Highapache2openSUSEPossible NULL dereference or SSRF in forward proxy configurations in Apache HTTP Server 2.4.51 and earlier8.2 Highapache2openSUSEPossible buffer overflow when parsing multipart content in mod_lua of Apache HTTP Server 2.4.51 and earlier9.8 Criticalapache2openSUSEPath Traversal and Remote Code Execution in Apache HTTP Server 2.4.49 and 2.4.50 (incomplete fix of CVE-2021-41773)9.8 Criticalapache2openSUSEPath traversal and file disclosure vulnerability in Apache HTTP Server 2.4.499.8 Criticalapache2openSUSEmod_proxy SSRF9.0 Criticalapache2openSUSEap_escape_quotes buffer overflow9.8 Criticalapache2openSUSEmod_proxy_uwsgi out of bound read7.5 Highapache2openSUSENULL pointer dereference in httpd core7.5 Highapache2openSUSERequest splitting via HTTP/2 method injection and mod_proxy7.5 Highapache2openSUSENULL pointer dereference on specially crafted HTTP/2 request7.5 Highapache2openSUSEUnexpected URL matching with 'MergeSlashes OFF'5.3 Mediumapache2openSUSEApache HTTP Server mod_session response handling heap overflow9.8 Criticalapache2openSUSEmod_session NULL pointer dereference7.5 Highapache2openSUSEmod_auth_digest possible stack overflow by one nul byte7.3 Highapache2openSUSEmod_proxy_http NULL pointer dereference7.5 Highapache2openSUSEApache HTTP Server versions 2.4.20 to 2.4.43 When trace/debug was enabled for the HTTP/2 module...7.5 Highapache2openSUSEApache HTTP server 2.4.32 to 2.4.44 mod_proxy_uwsgi info disclosure and possible RCE9.8 Criticalapache2openSUSEApache HTTP Server versions 2.4.20 to 2.4.43. A specially crafted value for the 'Cache-Digest'...7.5 Highapache2openSUSEIn Apache HTTP Server 2.4.0 to 2.4.41, redirects configured with mod_rewrite that were intended...6.1 Mediumapache2openSUSEIn Apache HTTP Server 2.4.0 to 2.4.41, mod_proxy_ftp may use uninitialized memory when proxying...5.3 Mediumapache2openSUSEImproper Privilege Management in Tomcat9.8 Criticalapache2openSUSEIn Apache HTTP Server 2.4.32-2.4.39, when mod_remoteip was configured to use a trusted...7.2 Highapache2openSUSEHTTP/2 (2.4.20 through 2.4.39) very early pushes, for example configured with "H2PushResource",...7.5 Highapache2openSUSEIn Apache HTTP server 2.4.0 to 2.4.39, Redirects configured with mod_rewrite that were intended...6.1 Mediumapache2openSUSEIn Apache HTTP Server 2.4.0-2.4.39, a limited cross-site scripting issue was reported affecting...6.1 Mediumapache2openSUSEIn Apache HTTP Server 2.4.18-2.4.39, using fuzzed network input, the http/2 session handling...9.1 Criticalapache2openSUSESome HTTP/2 implementations are vulnerable to unconstrained interal data buffering, potentially leading to a denial of service7.5 High- Show moreLoading…