RHEL 9 : mod_auth_openidc (RHSA-2026:69720)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:69720 advisory. The modauthopenidc is an OpenID Connect authentication module for Apache HTTP Server. It enables an Apache HTTP Server to operate as an OpenID Conne...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: httpd (UTSA-2026-090058)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-090058 advisory. In Apache HTTP Server 2.4.32-2.4.39, when modremoteip was configured to use a trusted intermediary proxy server using the PROXY protocol, a specially crafted PROXY...

Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: httpd (UTSA-2023-003821)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-003821 advisory. In Apache HTTP Server 2.4.53 and earlier, a malicious request to a lua script that calls r:parsebody0 may cause a denial of service due to no default limit on possib...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: httpd (UTSA-2026-090052)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-090052 advisory. In Apache HTTP Server 2.4.18-2.4.39, using fuzzed network input, the http/2 session handling could be made to read memory after being freed, during connection...

Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: httpd (UTSA-2023-000273)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-000273 advisory. Prior to Apache HTTP Server 2.4.55, a malicious backend can cause the response headers to be truncated early, resulting in some headers being incorporated into the...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: httpd (UTSA-2026-090059)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-090059 advisory. In Apache HTTP server 2.4.0 to 2.4.39, Redirects configured with modrewrite that were intended to be self-referential might be fooled by encoded newlines and redirec...

Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: httpd (UTSA-2023-003826)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-003826 advisory. If LimitXMLRequestBody is set to allow request bodies larger than 350MB defaults to 1M on 32 bit systems an integer overflow happens which later causes out of bounds...

Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: httpd (UTSA-2023-003827)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-003827 advisory. Apache HTTP Server 2.4.52 and earlier fails to close inbound connection when errors are encountered discarding the request body, exposing the server to HTTP Request...

RHEL 7 : mod_auth_openidc (RHSA-2026:69715)

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:69715 advisory. The modauthopenidc is an OpenID Connect authentication module for Apache HTTP Server. It enables an Apache HTTP Server to operate as an OpenID Conne...

RHEL 9 : mod_auth_openidc (RHSA-2026:69718)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:69718 advisory. The modauthopenidc is an OpenID Connect authentication module for Apache HTTP Server. It enables an Apache HTTP Server to operate as an OpenID Conne...

PT-2026-97015

Name of the Vulnerable Software and Affected Versions Apache Lounge Windows distribution of Apache HTTP Server affected versions not specified Description This issue involves insecure installation directory permissions within the default install directory on C:. The directory inherits write acces...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: httpd (UTSA-2026-090042)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-090042 advisory. A vulnerability was found in Apache HTTP Server 2.4.17 to 2.4.38. Using fuzzed network input, the http/2 request handling could be made to access freed memory in...

RHEL 10 : mod_auth_openidc (RHSA-2026:69719)

The remote Redhat Enterprise Linux 10 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:69719 advisory. The modauthopenidc is an OpenID Connect authentication module for Apache HTTP Server. It enables an Apache HTTP Server to operate as an OpenID...

RHEL 9 : mod_auth_openidc (RHSA-2026:69716)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:69716 advisory. The modauthopenidc is an OpenID Connect authentication module for Apache HTTP Server. It enables an Apache HTTP Server to operate as an OpenID Conne...

Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: httpd (UTSA-2023-000282)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-000282 advisory. Inconsistent Interpretation of HTTP Requests 'HTTP Request Smuggling' vulnerability in modproxyajp of Apache HTTP Server allows an attacker to smuggle requests to th...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: httpd (UTSA-2026-090455)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-090455 advisory. In Apache HTTP Server 2.4.0 to 2.4.41, redirects configured with modrewrite that were intended to be self-referential might be fooled by encoded newlines and redirec...

EulerOS Virtualization 2.10.0 : gnutls (EulerOS-SA-2026-3868)

According to the versions of the gnutls packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A vulnerability was found in Apache HTTP Server up to 2.4.67 Web Server and classified as critical.Using CWE to declare the problem...

EulerOS Virtualization 2.10.1 : httpd (EulerOS-SA-2026-3834)

According to the versions of the httpd packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A vulnerability was found in Apache HTTP Server up to 2.4.67 Web Server and classified as critical.Using CWE to declare the problem...

Exploit for Out-of-bounds Write in Apache Http_Server

CVE-2021-44790 Lab This repository contains a small local lab...

EulerOS Virtualization 2.12.0 : httpd (EulerOS-SA-2026-3643)

According to the versions of the httpd packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Improper Null Termination, Out-of-bounds Read vulnerability in Apache HTTP Server.This issue affects Apache HTTP Server: through...