Apache HTTP server 2.4.32 to 2.4.44 mod_proxy_uwsgi info disclosure and possible RCE

🗓️ 18 Aug 2020 07:00:00Reported by MicrosoftType

Apache HTTP Server mod_proxy_uwsgi versions 2.4.32 to 2.4.44 disclose information and may enable RCE.

Reporter	Title	Published	Views	Family All 145
0day.today	Apache2 mod_proxy_uwsgi Incorrect Request Handling Exploit	31 Aug 202000:00	–	zdt
IBM Security Bulletins	Security Bulletin: Rational Build Forge security advisory for Apache HTTP Server	27 Oct 202020:56	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite - IoT Component uses "Apache httpd 2.4" which is vulnerable to multiple CVEs	21 Mar 202506:40	–	ibm
FreeBSD	Apache httpd -- Multiple vulnerabilities	7 Aug 202000:00	–	freebsd
ATTACKERKB	CVE-2020-11984 — Multiple Vulnerabilities in Apache Web Server Could Allow for Remote Code Execution	7 Aug 202000:00	–	attackerkb
ATTACKERKB	CVE-2020-9490	7 Aug 202000:00	–	attackerkb
Tenable Nessus	Amazon Linux 2 : httpd (ALAS-2020-1490)	20 Nov 202000:00	–	nessus
Tenable Nessus	Amazon Linux AMI : httpd24 (ALAS-2020-1418)	31 Aug 202000:00	–	nessus
Tenable Nessus	Alibaba Cloud Linux 3 : 0017: httpd:2.4 (ALINUX3-SA-2022:0017)	14 May 202500:00	–	nessus
Tenable Nessus	Apache 2.4.x < 2.4.46 Multiple Vulnerabilities	13 Aug 202000:00	–	nessus